Virus in DOPUS ftplog.txt

Got a virus alert from my company's (HP) scanner when I logged into an ftp site with DOPUS. You will see from the attached file that the infected file was ftplog.txt. Just curious if anyone else has seen anything like this? I think I only use DOPUS & ftp on internal HP sites (not that someone couldn't infect them, of course.)

Thanks,

Rick

This is surely some "false positive". If someone would alter the contents of files in order to have some malware effect, why would he chose a txt file anyway, instead of altering some exe?

It's a text file, so I'd say you're fairly safe.

You'll have to check in your AV docs as to what "Exploit-ObscuredHTML" actually means, but to me it sounds like it's doing the typical AV thing of being overly paranoid in an attempt to scare you into continuing to pay for it :slight_smile:

This is not your "download a free trial" version of AV. This is serious corporate quality AV. I don't think I have EVER gotten a hit from it before - at least in over a year.

Rick

That's what hundreds of corporations thought about McAfee too, right up until the moment it flagged a critical Windows component as a virus and brought down systems all over the world.

Send the file to VirusTotal.com and it'll tell you if any other scanners think it is a virus, but seeing as viruses can't exist in plain-text files it seems very unlikely.