3/30/2010 2:05:27 PM    Real-time file system protection               file     
     C:\Documents and Settings\cfee\Local Settings\Temporary Internet 
Files\Content.IE5\L5O668UP\searchpad_core_metro_js_200911061221[1].js           
     JS/Exploit.CVE-2010-0806 trojan                cleaned by deleting (after 
the next restart) - quarantined            NT AUTHORITY\SYSTEM      Event 
occurred on a new file created by the application: C:\Program Files\Internet 
Explorer\iexplore.exe.
3/30/2010 2:05:22 PM    HTTP filter           archive 
http://a.l.yimg.com/a/lib/s5/searchpad_core_metro_js_200911061221.js            
    JS/Exploit.CVE-2010-0806 trojan                connection terminated 
MBA_DOMAIN\cfee      Threat was detected upon access to web by the application: 
C:\Program Files\Internet Explorer\iexplore.exe.

3/30/2010 2:05:27 PM    Real-time file system protection               file     
     C:\Documents and Settings\cfee\Local Settings\Temporary Internet 
Files\Content.IE5\L5O668UP\searchpad_core_metro_js_200911061221[1].js           
     JS/Exploit.CVE-2010-0806 trojan                cleaned by deleting (after 
the next restart) - quarantined            NT AUTHORITY\SYSTEM      Event 
occurred on a new file created by the application: C:\Program Files\Internet 
Explorer\iexplore.exe.
3/30/2010 2:05:22 PM    HTTP filter           archive 
http://a.l.yimg.com/a/lib/s5/searchpad_core_metro_js_200911061221.js            
    JS/Exploit.CVE-2010-0806 trojan                connection terminated 
<DOMAIN>\cfee             Threat was detected upon access to web by the 
application: C:\Program Files\Internet Explorer\iexplore.exe.

CFee
From: Micheal Espinola Jr [mailto:[email protected]]
Sent: Tuesday, March 30, 2010 3:51 PM
To: NT System Admin Issues
Subject: Re: ESET NOD32 & Yahoo Search

No problems here.  Anything more specific about the threat in the logs?

--
ME2

On Tue, Mar 30, 2010 at 11:16 AM, Carol Fee 
<[email protected]<mailto:[email protected]>> wrote:
Virus def 4985 20100330 is tagging all Yahoo search pages as infected.


________________________________
Carol Fee
Network Administrator
617-338-0623
[email protected]<mailto:[email protected]>

[cid:[email protected]]
   Massachusetts Bar Association
   20 West Street
   Boston, MA 02111-1204
   (617) 338-0500










~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

<<inline: image001.gif>>

Reply via email to