Topic "IGMP block" infected with Exploit.JS.Agent.~KA[at]34000491 ?

[Guest]

[Tarantela]

I recently searched on comodo forum a subject about IGMP and stumbled on a topic
Called "IGMP block"  https://forums.comodo.com/empty-t26707.0.html
and got an malware alert from CIS av - Exploit.JS.Agent.~KA[at]34000491

It seems that 3 pictures(211 bites size each all blank) are exploits and they are linked
to a certain web site(see picture properties to find web site).

I use CIS 3.12.111745.560 with av database 2898.

I would like to know if this is a positive or negative.

[ionelp]

Hi Tarantela,

I recently searched on comodo forum a subject about IGMP and stumbled on a topic
Called "IGMP block"  https://forums.comodo.com/empty-t26707.0.html
and got an malware alert from CIS av - Exploit.JS.Agent.~KA[at]34000491

It seems that 3 pictures(211 bites size each all blank) are exploits and they are linked
to a certain web site(see picture properties to find web site).

I use CIS 3.12.111745.560 with av database 2898.

I would like to know if this is a positive or negative.

We will verify this detection and get back to you with the conclusion.

Regards,
Ionel

[ionelp]

Hi Tarantela,

Please be advised, the reported detection is not false-positive.

Regards,
Ionel

[Tarantela]

Thank you for your help and quick reply.

[Tarantela]

I did research on the web site and it is reported as phishing site.
http://phish.opendns.com/?url=static.pochta.ru%2F404.html
I am asking any moderator to please remove web site links from the topic "IGMP block".

[Tags:]