This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Malware/Virus hitting Sharepoint web servers

hi All,

This morning all Sharepoint Web servers were hit with a Malware virus.

Here's the typical msg..

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\be88351c\52375692\App_Web_advsetng.aspx.2a428413.uc64czba.dll" belongs to virus/spyware 'Mal/DotNet-C'

EndPoint was able to catch and clean it...Anybody else seen this?

We have Sharepoint 2007 and WSS 3.0?

This thread was automatically locked due to age.

Parents

0 jak over 13 years ago

Hi,

I suspect that might have been a false positive:

http://www.sophos.com/security/analyses/viruses-and-spyware/maldotnetc.html

"Sophos updated detection of Mal/DotNet-C in poiso-cq.ide (published 15 Apr 2011 13:15 BST) to remove a possible misdetection originally issued in tdss-gk.ide (published 15 Apr 2011 04:53 BST). This issue is now resolved. Please contact technical support if you require further information."

If SAV is up to date ont he machine and you scan the file now, I suspect it will not be detected.

Regards,

Jak
:12025
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 jak over 13 years ago

Hi,

I suspect that might have been a false positive:

http://www.sophos.com/security/analyses/viruses-and-spyware/maldotnetc.html

"Sophos updated detection of Mal/DotNet-C in poiso-cq.ide (published 15 Apr 2011 13:15 BST) to remove a possible misdetection originally issued in tdss-gk.ide (published 15 Apr 2011 04:53 BST). This issue is now resolved. Please contact technical support if you require further information."

If SAV is up to date ont he machine and you scan the file now, I suspect it will not be detected.

Regards,

Jak
:12025
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data