Eset is blocking sites and maybe Analytics?

[Richard Conram]

It seems that Eset software is currently blocking access to sites under the domain relicnews.com.

Even some indications it may be related to Google Analytics.

Now, this is a serious site and I have been a member of its forums for over a decade, granted that Ads and other "imported" scripts may import code under no or little control, but all in all I want an explanation and cant find it on Esets site.

You may see a thread about this here:
http://forums.relicnews.com/showthre...y-AV-blocks-RN (no login required).

Explanation please?

[Marcos]

The site is hosting the Sirefef rootkit which is updated to a newer version on a regular basis.

[Richard Conram]

Hmm, afaik, that is a Unix Webserver, how can it be infected with a root kit according to this description?

It makes little sense

[Marcos]

I didn't say the server is infected. The attacker somehow managed to get access to the web server so removing the malware, changing the credentials for ftp accounts and updating the software running on the server are highly recommended.

[Richard Conram]

Ok the guys behind the site are getting reports that not only Eset is blocking it but now also Macafee

There should be no current reason for this and frankly, the information about how this came to occur in the first place is lacking. I am aware of some "lists" on the net that relies on voluntary contributions by any unhappy browsing person. Is Eset using some of these lists? 'Cause once you get on one of those, the job to getting off it can be tedious. Regardless of what amount of threat the site really is to its visitors.