NOD32 telling me IRC-Worm.julie is on this site

[deizel]

Everytime I try to look at the recent article on Hl2 episode 2's performance on different CPU's and GPU's NOD32 tells me it had to blobk irc-worm.julie.

 

[bsobel]

Originally posted by: deizel
Everytime I try to look at the recent article on Hl2 episode 2's performance on different CPU's and GPU's NOD32 tells me it had to blobk irc-worm.julie.

Link to the article please (but sounds like a false positive from NOD)
Bill

 

[deizel]

Hmm just tried it again and it's not doing it, though it did so multiple times before. http://www.anandtech.com/video/showdoc.aspx?i=3122

 

[bsobel]

Well given its a vbscript mass mailing worm, it looks like NOD32 was FP on the page.

 

[taltamir]

that would be nods first false positive... ever...
More likely an ad that was loading at that time period had a virus in it...
http://forums.anandtech.com/me...id=2106768&STARTPAGE=1

Check this thread

 

[bsobel]

Originally posted by: taltamir
that would be nods first false positive... ever...[/b]

You can't possibly be serious in that statement.

More likely an ad that was loading at that time period had a virus in it...
http://forums.anandtech.com/me...id=2106768&STARTPAGE=1
Check this thread

Since its a mass mailing worm, its more likely an image mis-triggered the FP. There isn't any way the image (given the virus in question) could execute (its not a gif exploit or anything of that nature).

Bill