Absoluter 0 Posted July 4, 2017 Share Posted July 4, 2017 Hi, A client called me to say a website of mine contains a virus. I scanned the website with the top 3 website virus scanners and it found nothing. I also scanned the server. Nothing. here is the URL: hxxp://bookhd.ca Why does NOD32 (ESET Internet security) report it? She is using Internet Explorer by the way. Thank you Link to comment Share on other sites More sharing options...
Administrators Marcos 5,070 Posted July 5, 2017 Administrators Share Posted July 5, 2017 The url doesn't appear to be blocked by ESET and I was able to open it in a browser alright. Link to comment Share on other sites More sharing options...
TheMalwareDiscoverer 1 Posted July 5, 2017 Share Posted July 5, 2017 18 hours ago, Absoluter said: Hi, A client called me to say a website of mine contains a virus. I scanned the website with the top 3 website virus scanners and it found nothing. I also scanned the server. Nothing. here is the URL: hxxp://bookhd.ca Why does NOD32 (ESET Internet security) report it? She is using Internet Explorer by the way. Thank you probably he uses a outdated version of Eset or of Eset's database Link to comment Share on other sites More sharing options...
Administrators Marcos 5,070 Posted July 5, 2017 Administrators Share Posted July 5, 2017 2 hours ago, TheMalwareDiscoverer said: probably he uses a outdated version of Eset or of Eset's database Even then it should not be blocked by ESET. Let's wait for OP to post more info. Link to comment Share on other sites More sharing options...
TheMalwareDiscoverer 1 Posted July 5, 2017 Share Posted July 5, 2017 Just now, Marcos said: Even then it should not be blocked by ESET. Let's wait for OP to post more info. yeah I think that Link to comment Share on other sites More sharing options...
Absoluter 0 Posted July 5, 2017 Author Share Posted July 5, 2017 Hi guys, Thanks for responding. Could it be from Nod32 itself? The info I have is simply that she uses nod32 and Internet Explorer. As it was already hard for me to get that information from the secretary. So no one is able to replicate her warning? Thanks Link to comment Share on other sites More sharing options...
itman 1,659 Posted July 6, 2017 Share Posted July 6, 2017 (edited) First it helps if you post the correct link as shown below which shows it is a https web site with a revoked certificate. I could not connect to http://bookhd.ca receiving the same "This page can't be displayed error": Edited July 6, 2017 by itman Link to comment Share on other sites More sharing options...
BobArch2 2 Posted July 6, 2017 Share Posted July 6, 2017 1 hour ago, itman said: First it helps if you post the correct link as shown below which shows it is a https web site with a revoked certificate. I could not connect to hxxp://bookhd.ca receiving the same "This page can't be displayed error": Just for information purposes... running ESET Smart Security 10.1.210 and in Chrome had no problem accessing hxxp://bookhd.ca. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,070 Posted July 6, 2017 Administrators Share Posted July 6, 2017 There's no alert about a trojan or malware triggered by ESET. The problem is that the certificate used for https communication was revoked. Here's what a browser reports without ESET installed: An error occurred during a connection to bookhd.ca. Peer's Certificate has been revoked. Error code: SEC_ERROR_REVOKED_CERTIFICATE Also there's a certificate common name mismatch: https://www.ssllabs.com/ssltest/analyze.html?d=bookhd.ca&ignoreMismatch=on&latest Link to comment Share on other sites More sharing options...
itman 1,659 Posted July 6, 2017 Share Posted July 6, 2017 I can now access the web site via http connection in IE11 w/o any issues. Link to comment Share on other sites More sharing options...
Recommended Posts