Probable False Positive on this Blog

trafton wrote re: Probable False Positive on this Blog

on 07-04-2004 10:04

we are getting alot of porn pop ups coming through now and every time we do Mcafee virusscan says it's Exploit-MhtRedir.gen and that they've cleaned the files but it still keeps popping up. does anyone know how to fix this problem? We would love any help we can get. We're not Techies if you know what I mean!!

Thanks
Shelly

trafton wrote re: Probable False Positive on this Blog

on 08-09-2004 10:40

McAffee free scan found the same virus on my computer, although I couls not find a programm that can also remove the virus. Now I used House Call, and that too detected the virus, although the name is slightly different.

This is the web site of the House Call free scan

http://housecall.trendmicro.com/housecall/start_corp.asp

trafton wrote re: Probable False Positive on this Blog

on 08-09-2004 13:47

Definately got rid of it now, by using the free scan of Panda

http://www.Pandasoftware.com/activescan/com/activescan_principal.htm

trafton wrote re: Probable False Positive on this Blog

on 11-21-2004 9:28

I was getting the same Mcafee "xploit-MhtRedir.gen" pop up message on my own message board.

Apparently, after i did some investigation on the mcafee site this trojan is being generated by the site host which have been infected earlier.

The trojan xploit a vulnerability in IE6 and try to install itself + other key loggers and crap from the infected site (host).

You can find out more information about it here:
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=101033

I'm off to contact my web host and let them know about their host being infected and infecting anyone who is visiting my forum.

Don't you just hate these things......arrrrrrrrggggggggg

trafton wrote re: Probable False Positive on this

on 01-08-2005 18:46

495 viagra http://discountpill.hotusa.org cheap phentermine http://pharmacy-cheap-phentermine.6x.to buy phentermine http://pharmacy-buy-phentermine.6x.to phentermine online http://phentermine-online-pharmacy.6x.to hydrocodone online http://hydrocodone-online-pharmacy.6x.to buy hydrocodone http://buy-hydrocodone-pharmacy.6x.to buy ambien http://buy-ambien-pharmacy.6x.to texas holdem em http://texas-holdem-em.6x.to adware spyware http://adware-spyware.6x.to spyware doctors http://spyware-doctors.6x.to buy diazepam http://buy-diazepam.6x.to pacific poker online http://pacific-poker-online.6x.to carisoprodol pharmacy http://carisoprodol-pharmacy.6x.to buy carisoprodol http://buy-carisoprodol.6x.to buy viagra http://buy-viagra-pharmacy.6x.to viagra online http://viagra-online-pharmacy.6x.to buy tramadol http://buy-tramadol-pharmacy.6x.to

trafton wrote re: Probable False Positive on this Blog

on 02-01-2005 10:14

http://ventur.analloverz.com/index.html
http://ventur.analloverz.com/aimee-sweet-website.htm
http://ventur.analloverz.com/aimee-sweet-site.htm
http://ventur.analloverz.com/free-aimee-sweet.htm
http://ventur.analloverz.com/sexy-centerfold.htm
http://ventur.analloverz.com/readhead-sexy-nude.htm
http://aimeesweet.6x.to/
http://www.aimeesweet.6x.to/

trafton wrote re: Probable False Positive on this Blog

on 02-25-2005 12:22

I got this message in your blog. really weird.

trafton wrote Adipal - the best druds for you

on 04-16-2005 0:38

Two sites about adipal
adipex.webzdarma.cz
adipex.mysteria.cz

trafton wrote Adipal - the best druds for you

on 04-16-2005 0:40

Two sites about adipal
<a href = "http://adipex.webzdarma.cz">adipex.webzdarma.cz</a>
<a href = "http://adipex.mysteria.cz">adipex.mysteria.cz</a>

trafton wrote re: Probable False Positive on this Blog

on 04-17-2005 15:25

Nice work

trafton wrote re: Probable False Positive on this Blog

on 04-22-2005 0:39

Some sites about pharmacy:
http://adipex.mysteria.cz
http://adipex.webzdarma.cz
http://buy-cheap-adipex.fromru.com
http://buy_adipex.land.ru
http://vicodin.fromru.com
http://ambien.atspace.biz
http://ambien.atspace.us
http://by-lortab.atspace.org
http://cialis.atspace.biz
http://cialis.atspace.us
http://fioricet.atspace.biz
http://fioricet.atspace.us
http://levitra.atspace.biz
http://levitra.atspace.org
http://levitra.atspace.us
http://phentermine.atspace.us
http://tramadol.atspace.us
http://ultram.atspace.us
http://valium.atspace.us
http://vicodin.atspace.biz
http://vicodin.atspace.us

trafton wrote re: Probable False Positive on this Blog

on 05-03-2005 23:22

This is DEFINATELY not a false positive thing....McAfee found this virus...and I CANNOT for the life of me get rid of it. Something it did tonight....sent out an email with my address that I definately didn't send. #$*&%$#!!! Now I'm afraid to buy anything since I don't want any info being sent out.

HELP!!!

trafton wrote re: Probable False Positive on this Blog

on 05-09-2005 5:24

Excellent Cialis -
http://1cialis.talkradio.com
http://1cialis.talkradio.com/order-cialis
http://1cialis.talkradio.com/cialis-online
http://viagra.relations.com
http://cialis.fiji.com
http://generic-viagra.healing.com
http://cialis-viagra-levitra.can.com/

trafton wrote re: Probable False Positive on this Blog

on 05-14-2005 6:11

trafton wrote re: Probable False Positive on this Blog

on 05-14-2005 6:13

Hi! Nice Site. I so some new interesting site. Check out some useful information on
http://links-domain.tripod.com
http://links-domain.fm.interia.pl
http://links.k9.pl
http://finance-links.docspages.com
http://pharmacy-links.lookingat.us
http://gambling-links.foronlinegames.com
http://links-domain.hothost.tv
http://pharmacy-links.tripod.com
http://gambling-links.tripod.com
http://finance-links.tripod.com

trafton wrote re: Probable False Positive on this Blog

on 05-14-2005 6:14

trafton wrote adult portal

on 05-23-2005 10:22

Syndication

Recent Posts

Tags

Write-Ups

Security Blogs

Miscellaneous Blogs

Security Sites

Archives

McAfee Detects Exploit-MhtRedir.gen

Comments