This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Re: False positive mal/HTMLgen-a

As the top Google hit for "Mal/HTMLGen-A" I thought I'd chime in here.  Sophos users are reporting that they're getting this Mal/HTMLGen-A error for my site:

http://rogerborg.dnsd.me

Which I use solely as a repository for handy images that I link to in other web forums.  Thusly for "rogerborg.dnsd.me/hipster-hulk.jpg", which sums up my feelings about now.

hipster-hulk.jpg

There's also a trivial (single <img>) index.html page, and a robots.txt that denies all.

This is all that the Sophos threat library has to say about this issue:

"Mal/HTMLGen-A is the threat name associated with web pages that have been classified as malicious by SophosLabs.

Web pages blocked by Sophos products as Mal/HTMLGen-A are likely to be used in an infection chain used to infect users with malware"

So it doesn't imply or even suggest any actual infection, it just means that Sophos doesn't much like the look of this site.  Is it because the domain is hosted on a dynamic IP?  The index.html is too simple?  There's a deny robots.txt?  I don't know, and I and the end usesr have no way of knowing.  Telling them that it's infected is deceitful, unhelpful, and alarming.

Poor show, chaps.  Poor show.

:36863


This thread was automatically locked due to age.
Parents
  • I just got these mal/htmlgen-a error:

    20141105 231035 Blocked web request to "gstatic.uptodown.net/img/logo.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.
    20141105 231036 Blocked web request to "img.uptodown.net/icons/android-x86.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.
    20141105 231038 Blocked web request to "gstatic.uptodown.net/v9/btn_pizza_v8.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.
    20141105 233805 Blocked web request to "img.uptodown.net/icons/virtualbox-3-1-4.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.
    20141105 233806 Blocked web request to "gstatic.uptodown.net/img/logo.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.
    20141105 233826 Blocked web request to "img.uptodown.net/icons/virtualbox-3-1-4.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.
    20141105 233826 Blocked web request to "gstatic.uptodown.net/blog/facebook.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.
    20141105 233940 Blocked web request to "img.uptodown.net/icons/virtualbox-3-1-4.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.
    20141105 233940 Blocked web request to "gstatic.uptodown.net/blog/rss.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.

    I assume it is a false positive from http://blog.en.uptodown.com/virtualize-android-x86-virtualbox/

    Thanks,

    Michael

    :54543
Reply
  • I just got these mal/htmlgen-a error:

    20141105 231035 Blocked web request to "gstatic.uptodown.net/img/logo.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.
    20141105 231036 Blocked web request to "img.uptodown.net/icons/android-x86.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.
    20141105 231038 Blocked web request to "gstatic.uptodown.net/v9/btn_pizza_v8.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.
    20141105 233805 Blocked web request to "img.uptodown.net/icons/virtualbox-3-1-4.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.
    20141105 233806 Blocked web request to "gstatic.uptodown.net/img/logo.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.
    20141105 233826 Blocked web request to "img.uptodown.net/icons/virtualbox-3-1-4.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.
    20141105 233826 Blocked web request to "gstatic.uptodown.net/blog/facebook.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.
    20141105 233940 Blocked web request to "img.uptodown.net/icons/virtualbox-3-1-4.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.
    20141105 233940 Blocked web request to "gstatic.uptodown.net/blog/rss.png" (linked from "blog.en.uptodown.com/virtualize-android-x86-virtualbox") for user (domain)\(user). 'Mal/HTMLGen-A' has been found at this website, reference ID 91105722.

    I assume it is a false positive from http://blog.en.uptodown.com/virtualize-android-x86-virtualbox/

    Thanks,

    Michael

    :54543
Children
No Data