BEWARE!!

[King Frankie]

Just an warning not everything you click are safe on stratics.

http://www.wowguide.se/ultima/files/virus.jpg

[Viper09]

eek

[Edina Monsoon]

And I bet no one at EA Mythic even checked that site to see if they are advertising stuff for sale, and have banners.




"I don't want more things, sweetie, I want better things"

[King Frankie]

i would be pretty embaressed by now if it was me wounder how many that has been hit by it :(

[Flora Green]

And I bet no one at EA Mythic even checked that site to see if they are advertising stuff for sale, and have banners.




"I don't want more things, sweetie, I want better things"

Heh heh.

[Kyrie_Elaison]

WOW!

And that's part of an FoF, I know cuz I went there to check it out.

*runs home to check for a Trojan*

[T_Amon_from_work]

You are aware that some products have different threat thresholds that can deliver a "false positive", right? AVG (ver 8, all processes on and updated) does not report anything abnormal from the site.

That said, thank you for the warning ... and if it truly is harmful I will be the first to know, won't I? <chuckle>

[GarthGrey]

I'm guessing this is fairly serious. That being said, "Beware" was the best you could do for a title? Not a real attention grabber.

[Jeremy]

My evil corporate antivirus doesn't kick up a warning either - is anyone but the OP getting it?

[King Frankie]

i shouldnt have to say anything at all it shouldnt be there from the start.

[Viper09]

AVG version 8.
I got nothing

[Adam_UOForums]

Using the latest trial copy of Nod, i get the same message

[Setnaffa]

Symantec Anti-Virus doesn't find anything wrong with that page. My AV Definition is dated today.

[RaDian FlGith]

My evil corporate antivirus doesn't kick up a warning either - is anyone but the OP getting it?Nothing here, and I'm running Sophos here at work.

[Halister Marner]

Nothing on Kaspersky. I can't even see any particular code or scripts on that page that would cause that to show up.

[T_Amon_from_work]

Sorry, but someone else in this thread stated a trial version of NOD reported it, bu Norton, AVG, Sophos and others are NOT reporting it.

If you are on a trial version or beta release it may well be a false positive. Honest, what you've done is good, but it really could be this. Please don't get defensive at others words when I believe they are trying to help.

I once saw McAfee do a false positive on a MS Office CD - gotten at work from the MSDN (MS Developer Network) subscription we had. Norton also barfed on it. Why? Because the heuristic code used in Office for internal macroing and detection created a string of characters that reported as a virus. It does happen.

[King Frankie]

Sorry, but someone else in this thread stated a trial version of NOD reported it, bu Norton, AVG, Sophos and others are NOT reporting it.

If you are on a trial version or beta release it may well be a false positive. Honest, what you've done is good, but it really could be this. Please don't get defensive at others words when I believe they are trying to help.

I once saw McAfee do a false positive on a MS Office CD - gotten at work from the MSDN (MS Developer Network) subscription we had. Norton also barfed on it. Why? Because the heuristic code used in Office for internal macroing and detection created a string of characters that reported as a virus. It does happen.

Might be it, but i dont see why NOD would make an quaratine file without something in it?! the virus signature file got updated just before i checked that link i felt it was quite alarming to have that pop up in my face when i know alot of iffy sites are out there. I thought a warning was in place and did so.

peace

[Halister Marner]

Might be it, but i dont see why NOD would make an quaratine file without something in it?! the virus signature file got updated just before i checked that link i felt it was quite alarming to have that pop up in my face when i know alot of iffy sites are out there. I thought a warning was in place and did so.

peace

Are there anymore options in NOD to display what script it was blocking?

It lists it as a JS trojan downloader, so there should be some further documentation as to what it blocked.

[King Frankie]

Are there anymore options in NOD to display what script it was blocking?

It lists it as a JS trojan downloader, so there should be some further documentation as to what it blocked.

i have the option to quaratine it or open the file i dont dare doing that becuase i dont wanna sit there like a fool seeing my computer beeing eaten :) i can rar the file and mail it if you want then you can check it out. if you arent here tomorrow we would know why ;)

[Nok]

Hi King Frankie,

Also no alarms with Avira's AntiVir either. Also checked McAfee's SiteAdvisor for elvenorder.com (http://www.siteadvisor.com/sites/elvenorder.com), and thier latest check came up clean (green, being safe). WOT (Web Of Trust) has no report for elvenorder.com (http://www.mywot.com/en/scorecard/elvenorder.com).

As mentioned, it could be a false positive... they do happen. But just to be on the safe side, you may want to check with ESET's (NOD32) support services (http://www.eset.com/support/index.php).

Hope that helps.

[Adam_UOForums]

Seems like a false positive to me
It only happens with nod when you click the link in the fof
But, "Noscript" doesn't show any suspicious scripts running on the site.

[Mina_Lino]

Spyware Doctor did not react either on the elverorder link...

My last auto update was 2 hours ago...


-Mina-

[Aurelius]

I've seen others reports turning up of false positives for ESET's NOD32 - here (http://forums.comodo.com/help_for_v3/threat_found_with_eset_nod32_v3_false_positive_sol ved-t26721.0.html) for example.

No security programs will ever be 100%, ESET themselves acknowledge that false positives will sometimes creep through, as their website says

"Low False Positive Rate
A very low false positive rate ensures that the “good” files on your computer will not be flagged as malware. This is due to the intelligent synergistic use of advanced heuristics and generic signatures. ESET ThreatSense has produced the fewest false positives in its long history of testing with Virus Bulletin. "

I don't personally use ESET, but I don't doubt they provide excellent software - just looks like, this time, it's been a little too sensitive and triggered an unnecessary alert.

[Amathist of PoC]

no issue from Avast either viewed the site fine no virus detected. Mine updates every day sometimes more then once lol.

[ultima online]

it most possible that they had a .php script error that was flagged as a trojan, and since on their site they said they where having issues with their forums that may be the case and nod has an over-sensitivity to .php scripts

[GalenKnighthawke]

My evil corporate antivirus doesn't kick up a warning either - is anyone but the OP getting it?

Out of curiosity, for anti-virus do you all have something in-house or do you just subscribe to one of the major ones?

-Galen's player

[Omnius]

my mac anti-virus reports a threat for windows but none of my windows stuff reports a thing.