Virus on homepage?
Author
Discussion

simpo two

Original Poster:

91,613 posts

289 months

Tuesday 9th March 2004
quotequote all
I've just made a simple website for a customer, nothing clever I confess. But I uploaded it to my domain for him to have a look at. He just rang and said that when he looked at it, he got a virus warning mentioning 'Bloodhound.packed'.

I've checked with Symantec and 'Bloodhound' seems to be their generic term for a virus it can't recongise.

I've just downloaded today's update from Symantec and done a full scan - and also AdAware - and found nothing. Last time something got 'attached' to a homepage like this it was spyware and AdAware fixed it.

Question is: have I got it and unknowingly uploaded it, or has he got it on his machine? How can we find out?

Podie

46,649 posts

299 months

Tuesday 9th March 2004
quotequote all
I know of two that have the alias "Bloodhound"..

Lookup:

1) W32/Tarit.worm
2) Birt.356

simpo two

Original Poster:

91,613 posts

289 months

Tuesday 9th March 2004
quotequote all
Podie said:
I know of two that have the alias "Bloodhound"..

Lookup:

1) W32/Tarit.worm
2) Birt.356


Thanks Podie. Tarit seems to be a 2003 virus, and Birt is mentioned as far back as 2000. Interestingly most of the sites I found are German or similar...

So I can't imagine it's one of those. But Symantec has a feature called Bloodhound Heuristics to catch things it doesn't quite know but might be a virus.

www.symantec.com/avcenter/venc/data/bloodhound.packed.html

Podie

46,649 posts

299 months

Tuesday 9th March 2004
quotequote all
Heuristics identify virus type behaviour and I would personally recommend people use that facility if they have it.

Might be worth cross-referencing and checking McAfee..?