alparsla Posted September 28, 2010 Report Share Posted September 28, 2010 I'm developing ASP.NET web application with Visual Studio 2005 SP1 on Windows 7. Starting today, everytime I build the web site, I get a W32.Generic.Ethos warning. I've attached the infected file. I've read from below that, Ethos is something generic. Maybe it is better if you inspect the attached file. http://forum.immunet.com/index.php?/topic/352-thoughts-on-efficacy/ Keep up good work, alparsla App_Web_wz-kvkgl.zip Link to comment Share on other sites More sharing options...
ritchie58 Posted September 28, 2010 Report Share Posted September 28, 2010 Alparsla, the ASP.NET Web application has a zero-day vulnerability. Please click this link to eEye Digital Security web site for more info. ASP.NET Viewstate Padding Information Disclosure I also posted in the General Forum earlier today about zero-day vulnerabilities and some web sites that have some comprehensive lists of affected patched & unpatched software applications. Link to comment Share on other sites More sharing options...
alfred Posted September 28, 2010 Report Share Posted September 28, 2010 I'm developing ASP.NET web application with Visual Studio 2005 SP1 on Windows 7. Starting today, everytime I build the web site, I get a W32.Generic.Ethos warning. I've attached the infected file. I've read from below that, Ethos is something generic. Maybe it is better if you inspect the attached file. http://forum.immunet.com/index.php?/topic/352-thoughts-on-efficacy/ Keep up good work, alparsla Thanks Alparsla, this is fixed now. Cheers, al Link to comment Share on other sites More sharing options...
ritchie58 Posted October 1, 2010 Report Share Posted October 1, 2010 Microsoft has issued a patch for the zero-day exploit vulnerability for the ASP.Net application. More info at this link. Microsoft Patches ASP.Net Web Application Link to comment Share on other sites More sharing options...
Guest Nate Posted October 1, 2010 Report Share Posted October 1, 2010 I just downloaded OpenOffice from CNET, and it's busy installing. The w32.generic.ethos popped up. Is it OpenOffice, or something else? Link to comment Share on other sites More sharing options...
Guest Orlando Posted October 2, 2010 Report Share Posted October 2, 2010 I just downloaded OpenOffice from CNET, and it's busy installing. The w32.generic.ethos popped up. Is it OpenOffice, or something else? Try to download from the official site, maybe the virus is probably present. http://www.openoffice.org/ I download programs from the official websites, we see together, and if the virus persists will be a FP. Regards, Orlando Link to comment Share on other sites More sharing options...
alfred Posted October 2, 2010 Report Share Posted October 2, 2010 I just downloaded OpenOffice from CNET, and it's busy installing. The w32.generic.ethos popped up. Is it OpenOffice, or something else? I am looking now but it's likely an FP. It should be sorted out in the next 20 minutes. al Link to comment Share on other sites More sharing options...
yasuo Posted October 3, 2010 Report Share Posted October 3, 2010 Hello, i also maybe get a FP on another .NET App: http://www.ts3admin.noa-x.de/setup.exe On the File TS3QueryLibCore.Framework.dll Can you tell me if this is "just" a security whole or a virus itself? Link to comment Share on other sites More sharing options...
Guest Orlando Posted October 3, 2010 Report Share Posted October 3, 2010 Hello, i also maybe get a FP on another .NET App: http://www.ts3admin.noa-x.de/setup.exe On the File TS3QueryLibCore.Framework.dll Can you tell me if this is "just" a security whole or a virus itself? This is a FP. It's safe. Thanks for report. Orlando Link to comment Share on other sites More sharing options...
Thom Posted October 4, 2010 Report Share Posted October 4, 2010 When might this FP be fixed? I'm getting it repeatedly on a .Net page that I'm developing on my localhost laptop... It's quite a nuisance having it pop up every time I reload a page I'm testing, to the point that I'll be disabling Immunet soon out of frustration (which I don't want to do). Thank you, Thom Link to comment Share on other sites More sharing options...
Guest Orlando Posted October 5, 2010 Report Share Posted October 5, 2010 When might this FP be fixed? I'm getting it repeatedly on a .Net page that I'm developing on my localhost laptop... It's quite a nuisance having it pop up every time I reload a page I'm testing, to the point that I'll be disabling Immunet soon out of frustration (which I don't want to do). Thank you, Thom I reported it to Alfred, Thanks, Orlando Link to comment Share on other sites More sharing options...
Pedersen Posted October 5, 2010 Report Share Posted October 5, 2010 Hello Thom I have just checked and the FP have been fixed. Best regards Immunet team Link to comment Share on other sites More sharing options...
alfred Posted October 5, 2010 Report Share Posted October 5, 2010 When might this FP be fixed? I'm getting it repeatedly on a .Net page that I'm developing on my localhost laptop... It's quite a nuisance having it pop up every time I reload a page I'm testing, to the point that I'll be disabling Immunet soon out of frustration (which I don't want to do). Thank you, Thom Thom Sorry, I fixed this earlier and forgot to post back to the board. As Pedersen indicates, it is fixed. Link to comment Share on other sites More sharing options...
Pedersen Posted October 5, 2010 Report Share Posted October 5, 2010 I have contacted all AV vendors about the FP our installer is causing. Several have reported that the FP should be gone in newest update. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.