The Question and Answer Board

[breezin_chs]

That's one of our ad servers.

Yep, it's clearly one of your servers, which seems to be a link to the malware.



If your ad server is essentially a database, wouldn't the originating URL of the malware be contained in the Oasis directory above?

Whatever triggered your alert (and as Dave pointed out, it may be nothing) was the underlying ad.

Agree, if the ads are bypassing your network and, therefore, aren't scanned by your firewall, shouldn't you set up a dedicated lone, little puter somewhere to represent Mr/s. iHub User and alert you to malware?

The alerts/malware are for real and I'll be happy to fish a sample out of quarantine and email it to you. Not to be snarky, but when you get reports of users (today) who are afraid to go on iHub with their primary computer, I would take this a little more seriously.

Unless you can tell us the url for the underlying ad, there's not much we can do.

Sorry, don't believe that.