Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Getting virus alerts from Barracuda when downloading rkill


  • Please log in to reply
4 replies to this topic

#1 Steve Lucas

Steve Lucas

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:52 PM

Posted 07 June 2012 - 03:03 PM

Hi,

I just got the following message when one of my users tried to download rkill:

This email is from the Barracuda Web Filter. We have detected and blocked the download of: VIRUS Trojan.Hupigon-33703
from the server:download.bleepingcomputer.com
with the URL of:http://download.bleepingcomputer.com/dl/e5daf81ea85b9a75376c9c380f3db733/4fd0c27b/windows/security/security-utilities/r/rkill/rkill.exe

I know that my Sophos anti-virus initially detected some programs like Combofix as a virus but this is a new issue and I have never gotten an alert from the Barracuda Web filter before. Any advice would be greatly appreciated. Thanks.

Steve

BC AdBot (Login to Remove)

 


#2 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,593 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:09:52 PM

Posted 07 June 2012 - 03:18 PM

It's a false positive. If you have the ability to white list or notify barracuda please do. They typically listen to the customer more than the vendor.

#3 Steve Lucas

Steve Lucas
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:52 PM

Posted 07 June 2012 - 04:09 PM

Thank you. I will notify the vendor and test it myself. I will also white list the domain. Thanks again.

#4 AdrianK_IT

AdrianK_IT

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:52 AM

Posted 06 July 2012 - 02:24 AM

This is just to add that ClamWin Free 0.97.4 also reports this 'trojan' in versions of rkill.

#5 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,593 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:09:52 PM

Posted 06 July 2012 - 08:09 AM

THanks..i will reach out to them.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users