Edwin Macadam
WGMA Forum 221195
Thu May 2, 2013 09:41
85.210.109.206

Hi,

I have received an email which suggests there might be a problem somewhere in the system, copy below:

===========================


*Subject:* WGMA Forum

Who looks after the WGMA Forum?

I have just followed a link in the update email to Francis’ latest post
and on arrival at the web site my firewall reported (and blocked) an
attempted intrusion:

Date & Time,



Risk,



Activity,



Status,



Recommended Action,



IPS Alert Name,



Default Action,



Action Taken,



Attacking Computer,



Attacker URL,



Destination Address,



Source Address,



Traffic Description

01/05/2013 13:46:30,



High,



An intrusion attempt by words.oy-prfldetainedxis.info was blocked.,



Blocked,



No Action Required,



Web Attack: SofosFO Exploit Kit Website,



No Action Required,



No Action Required,



words.oy-prfldetainedxis.info (91.237.153.11, 80)",



words.oy-prfldetainedxis.info/complimentary_gentiles.html,"



HP-DV6-6B51EA (192.168.0.12,49835)",



91.237.153.11 (91.237.153.11),



TCP, www-http" Network traffic from
words.oy-prfldetainedxis.info/complimentary_gentiles.html matches the
signature of a known attack. The attack was resulted from
\DEVICE\HARDDISKVOLUME2\PROGRAM FILES (X86)\INTERNET EXPLORER\IEXPLORE.EXE.

It may be a false alarm, but may be that the application which runs the
forum has a problem – better safe than sorry.

John Burke

Home:

Phone: <023 8036 5024>

Mobile: <07502 393 942>

No virus found in this message.
Checked by AVG - www.avg.com <http://www.avg.com>
Version: 2013.0.2904 / Virus Database: 3162/6286 - Release Date: 04/30/13


===========================


Could you please look nto it?

Thanks

Edwin Macadam






    • Thanks Tamara, I'll pass this on (nm)Edwin Macadam, Sat May 4 07:48
    • Re: WGMA Forum 221195Tamara, Sat May 4 07:19
      Quite often, this sort of thing is a false positive and nothing to be concerned about. I have checked the DiscApp and couldn't find anything out of the ordinary that would trigger it.
  • Click here to receive daily updates