Wilders Security Forums  

Go Back   Wilders Security Forums > Archived Forums > Closed Sub-Forums > Archived ESET Support Forums > NOD32 version 2 Forum
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old June 5th, 2005, 03:49 PM
rothko's Avatar
rothko rothko is offline
Frequent Poster
 
Join Date: Jan 2005
Location: UK
Posts: 579
Default IMON - site blocked

i've not seen this before, so thought i'd share. the other day imon detected a trojan on a site and i got the alert window and clicked 'Terminate', and that was that.

2 days later i wanted to show my girlfriend the alert window so she's knows what to expect if she stumbles across anything while browsing, i entered the url of the trojan and hit go, up popped the IMON threat window, i clicked Terminate and the next page was the one i have included below. I've not seen this before, and I've had a few IMON alert windows while browsing, so was wondering if this is new to 2.5 and connected with the 'Website access blocking' option in IMON settings, anyone know?

If it is, then is it likely that the alert i got from visiting that site was written to the event log, then sent to Eset as part of the Early Warning System (which i have enabled), whereby it was added to the list of blocked sites by way of an update. All in the space of 2 days? If it is then i'm really impressed! or maybe IMON adds the url to the list itself after you have visited a site with a threat, either way it has got me intrigued (sad, i know )
Attached Thumbnails
Click image for larger version

Name:	imon.jpg
Views:	155
Size:	71.5 KB
ID:	159300  

__________________
kiss my pig
  #2  
Old June 5th, 2005, 04:00 PM
Marcos Marcos is offline
Eset Moderator
 
Join Date: Nov 2002
Posts: 14,193
Default Re: IMON - site blocked

I assume you had your browser set to higher compatibility before, hence you hadn't got that alert.

As for submitting suspicious files via ThreatSense, please DO NOT manually SUBMIT files already detected by NOD32, regardless of whether they've been detected by name or by advanced heuristics, unless you suspect a false positive.
  #3  
Old June 5th, 2005, 04:13 PM
Visitor99
 
Posts: n/a
Default Re: IMON - site blocked

That didn't answer his question!
  #4  
Old June 5th, 2005, 04:14 PM
rothko's Avatar
rothko rothko is offline
Frequent Poster
 
Join Date: Jan 2005
Location: UK
Posts: 579
Default Re: IMON - site blocked

Quote:
Originally Posted by Marcos
I assume you had your browser set to higher compatibility before, hence you hadn't got that alert.
ah, i see. yes i did change to higher efficiency, i didnt realise this is how it worked, thanks for the explanation.
Quote:
Originally Posted by Marcos
As for submitting suspicious files via ThreatSense, please DO NOT manually SUBMIT files already detected by NOD32, regardless of whether they've been detected by name or by advanced heuristics, unless you suspect a false positive.
nope, wouldnt do that. i only submit the FPs.

cheers, lee
__________________
kiss my pig
 

Wilders Security Forums > Archived Forums > Closed Sub-Forums > Archived ESET Support Forums > NOD32 version 2 Forum « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 06:21 PM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums