Przemek

I will answer myself, since apparently no one ESET representative has time for it. In my opinion there was no infection at all ! Just bad update with virus database, that caused false alarms. Isn't that right ? Everything started with update and ended with next update after few hours, giving terrible headache IT security responsible people meanwhile. No infection detected whatsoever.

Same situation here! 12 workstation infected today within one hour ! All with ESET Antivirus 5.0.2237.2. Operating systems: Win 10,8,7,XP. I think that the virus is adding something to downloaded http contents (https is ok). It happens in all browsers: Firefox, Opera, IE. NOD is blocking this contents but is not able to lactate virus itself - scan result are negative. It's adding specific content, not to all web page but most used on the specific PC. I wasn't able login to LAN printer web page (HTTP), virus is adding some stuff and NOD is Blocking the page. I also tried alternatively to connect via mobile network, to eliminate, that it could be gateway infection. Names of the viruses that NOD is finding in web pages (always the same): - For Firefox and Opera: JS/ScrInject.B - For IE: Refresh.BC Please help !!!