Jump to content
moonvest

Trace.Known Threats from Netgear site -- FP?

Recommended Posts

SAS flagged two items in my temporary internet files, both from Netgear's support site (hxxp://kb.netgear.com). Nothing else was flagged by SAS and I don't seem to be having any other issues. Submissions to VirusTotal and Jotti came back negative. Could these be false positives? I have quarantined both files for the time being.

Thanks!

SUPERAntiSpyware Scan Log

https://www.superantispyware.com

Generated 02/11/2009 at 11:51 PM

Application Version : 4.25.1012

Core Rules Database Version : 3754

Trace Rules Database Version: 1718

Scan type : Complete Scan

Total Scan Time : 00:19:31

Memory items scanned : 428

Memory threats detected : 0

Registry items scanned : 3958

Registry threats detected : 0

File items scanned : 15472

File threats detected : 2

Trace.Known Threat Sources

C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\2MJS71U7\netgear_basic_navigation[1].xml

C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\S1J5U882\flashNavBasic[1].swf

Share this post


Link to post
Share on other sites
SAS flagged two items in my temporary internet files, both from Netgear's support site (hxxp://kb.netgear.com). Nothing else was flagged by SAS and I don't seem to be having any other issues. Submissions to VirusTotal and Jotti came back negative. Could these be false positives? I have quarantined both files for the time being.

Thanks!

SUPERAntiSpyware Scan Log

https://www.superantispyware.com

Generated 02/11/2009 at 11:51 PM

Application Version : 4.25.1012

Core Rules Database Version : 3754

Trace Rules Database Version: 1718

Scan type : Complete Scan

Total Scan Time : 00:19:31

Memory items scanned : 428

Memory threats detected : 0

Registry items scanned : 3958

Registry threats detected : 0

File items scanned : 15472

File threats detected : 2

Trace.Known Threat Sources

C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\2MJS71U7\netgear_basic_navigation[1].xml

C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\S1J5U882\flashNavBasic[1].swf

We'll take a look, they are in the cache, so no harm in removing.

Share this post


Link to post
Share on other sites

The same two Temporary Internet Files are still being flagged after I visit the Netgear Support site. Files have been reported as False Positives through SAS and also quarantined. Here is the log:

SUPERAntiSpyware Scan Log

https://www.superantispyware.com

Generated 02/24/2009 at 07:31 PM

Application Version : 4.25.1012

Core Rules Database Version : 3773

Trace Rules Database Version: 1732

Scan type : Complete Scan

Total Scan Time : 00:20:03

Memory items scanned : 428

Memory threats detected : 0

Registry items scanned : 3959

Registry threats detected : 0

File items scanned : 15420

File threats detected : 2

Trace.Known Threat Sources

C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\OS5ZFT6K\flashNavBasic[1].swf

C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\79R9JIQC\netgear_basic_navigation[1].xml

Thanks for your help!

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

×
×
  • Create New...