Blue1978:
vkundakci:Are these false positives?
More than likely if you have had the software that long. Take a look at the post located here about retrieving quarantined files in Blink and taking action on them:
http://forums.eeye.com/forums/t/1058.aspx
Thanks. This are the same instructions you get when you look at the Blink log entries, right?
By the way, I also got a new spyware notification during the latest scan which is also new and confusing since the specified registry key is not found nor Blink was able to disinfect. I think the AV definiitions that were loaded yesterday afternoon are a little broken.
Also note that the backslash is missing in the registry key. I don't know if that is always the case.
Is this the right support forum to discuss these issues? /V
body
{
background-image: url("C:\Program Files\eEye Digital Security\Blink\Templates\watermark.gif");
background-repeat: no-repeat;
background-attachment: fixed;
background-position: bottom right;
}
.Grid .value
{
border-bottom: 1px solid #f0f0f0;
}
| Malware : Malware found - FraudLoad.do
|
7/30/2009 11:13:15 PM
|
| Event ID: |
BLINK-MAL-205 |
| Severity: |
High
|
| Description: |
Blink
has found a malware application |
| Alert: |
Yes |
| MalwareID: |
1582 |
| Name: |
FraudLoad.do |
| Item found: |
HKEY_LOCAL_MACHINESOFTWARE\Classes\TacOnlyOne |
| Action: |
Repair |
| Second Action: |
Quarantine |
| Malware Description: |
This is
a unwanted rogue security program that claims it detects and removes viruses;
spyware and intruders; yet it is bundled other malware. |
| Category: |
Spyware |
| |
body
{
background-image: url("C:\Program Files\eEye Digital Security\Blink\Templates\watermark.gif");
background-repeat: no-repeat;
background-attachment: fixed;
background-position: bottom right;
}
.Grid .value
{
border-bottom: 1px solid #f0f0f0;
}
| Malware : Malware disinfection error
|
7/30/2009 11:13:18 PM
|
| Event ID: |
BLINK-ENG-203 |
| Severity: |
High
|
| Description: |
Blink
has failed to disinfect a malware package |
| Alert: |
No |
| MalwareID: |
1582 |
| Name: |
FraudLoad.do |
| Action: |
Disinfection Error |
| Item Found: |
HKEY_LOCAL_MACHINESOFTWARE\Classes\TacOnlyOne |
| Error: |
The
system cannot open the file. |