MSN.co.uk virus alert is false alarm
DON'T PANIC
Posted in Security, 31st October 2001 13:51 GMT
Free Download - Security Web 2.0
Many subscribers of MSN.co.uk were told that the site was infected by a virus when they logged on this morning. But it was a false alarm.
Surfers using Norton Anti-Virus are told that a Trojan horse has been detected in a Vbs (Visual Basic Script) file on the site (www.msn.co.uk/webinclude/mc.vbs), which will appear in the cache of a user's browsers after visiting the site.
But the file is harmless and the alert is a false positive, according to Eric Chien, chief researcher at Symantec's Anti-Virus Research Centre.
Over-sensitivity in the automatic detection of viruses (or heuristics) included within Norton Anti-Virus is to blame. "You have to strike a balance with heuristics and sometimes you can get it wrong," he said.
The next update to Norton Anti-Virus signature definition files, which Symantec releases today, updates users' protection so they can visit MSN.co.uk without receiving a warning. ®
Related Stories
Sophos rebuffs virus-spreading charge
Virus writers are industrial terrorists - MS
Opera and Mozilla get MSN support
MSN.co.uk begins Web email migration
Symantec users risk redirection to hacker sites

An Improved Architecture for High-Efficiency, High-Density Data Centers [WP126]
Implementing Energy Efficient Data Centers [WP114]
Blind SQL Injection [3-2APYM5E]
The Evolving Security Landscape
The Register Guide to Extended Validation

Inmate hacked prison network, broke into employee database
Miscreants hijacking machines via (freshly patched) Adobe flaw
Martial law planned for Craigslist's red-light district
Cocaine addicted IT manager hacks ex-employer's mail servers