It was like deja vu, only a few months ago I wrote about an issue with Kaspersky Internet Security 2010 and Google Adsense. So you can imagine my surprise this morning when our Blue Coat ProxyAV appliances started sending out hundreds of alarms that URLs associated with Google Adsense were infected with a Trojan. After looking at the Javascript it was pretty clear that this was a false positive result.

2010-01-25 12:04:25-05:00EST
Hardware serial number: 3806111111
ProxyAV (Version 3.2.4.1(43261)) – http://www.BlueCoat.com/ Antivirus
Vendor: Kaspersky Labs Scan Engine Version: 8.0.1.23
Pattern File Version: 100125.095500.3363319 (Timestamp: 2010.01.25 09:55:00)

Machine name: ProxyAV-gosford
Machine IP address: 10.1.1.45
Server: 64.233.169.165
Client: 10.1.1.100

Protocol: ICAP
Virus/PUS: “Trojan.JS.Redirector.ar” found!
URL: http://pagead2.googlesyndication.com/pagead/show_ads.js

There was quite a thread over on the support forums at Kaspersky on the subject.

Cheers!

Related posts:

  1. Kaspersky Internet Security 2010 – Google Adsense – Phishing URL
  2. WordPress – Love It or Hate It!