DefaultWsdlHelpGenerator.aspx & Win32/Viking.MB virus

Discussion in 'ESET NOD32 Antivirus' started by PII_David, Oct 6, 2008.

Thread Status:
Not open for further replies.
  1. PII_David

    PII_David Registered Member

    Joined:
    Dec 10, 2007
    Posts:
    17
    We recently observed a large number of detections of Win32/Viking.MB in
    C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\DefaultWsdlHelpGenerator.aspx

    Anyone else observed any false detections of virus with a similar file? Any suggestions how to mitigate this?

    Others indicate that these are coming from malicious web sites...
    http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=HTML_IFRAME.CP

    We're using NOD32 v3.0.669 Business edition (RAS/RAC)

    Virus signature database: 3497 (20081006)
    Update module: 1024 (20080514)
    Antivirus and antispyware scanner module: 1153 (20081001)
    Advanced heuristics module: 1076 (20080917)
    Archive support module: 1082 (20080911)
    Cleaner module: 1032 (20080724)
    Anti-Stealth support module: 1002 (20080723)

    David
     
  2. Rmuffler

    Rmuffler Former Eset Moderator

    Joined:
    Jun 26, 2008
    Posts:
    995
    Location:
    San Diego, CA USA
    Hello PII_David,

    Please submit a sample to us and we will take a look at it? To do so follow the instructions provided here.

    Thank you,

    Richard
     
Thread Status:
Not open for further replies.