Kaspersky Strangeness

Forum for support for the Kaspersky AntiVirus for WinGate plugin

Moderator: Qbik Staff

Kaspersky Strangeness

Postby alyork » Dec 17 09 4:27 pm

Recently several of my client are experiencing odd problems with Kaspersky. We aren't sure if Kaspersky is doing its job or if its going bonkers.

1. Clent web pages being blocked. Have scanned the web site with other products and they can't find any problems either. The hosting site can't find any problems. Re-clicking on a page displays it.

------

Content blocked [Trojan.JS.Redirector.t]
Kaspersky AntiVirus 2.0 for WinGate has blocked access to http://bcfosterparents.ca/benefits.php.
The file is infected with Trojan.JS.Redirector.t
Contact your system administrator if you believe this page should not have been blocked
Kaspersky AntiVirus 2.0 for WinGate - http://www.wingate.com

Content blocked [Trojan.JS.Redirector.t]
Kaspersky AntiVirus 2.0 for WinGate has blocked access to http://bcfosterparents.ca/informationkit.php.
The file is infected with Trojan.JS.Redirector.t
Contact your system administrator if you believe this page should not have been blocked
Kaspersky AntiVirus 2.0 for WinGate - http://www.wingate.com

Content blocked [Trojan.JS.Redirector.t]
Kaspersky AntiVirus 2.0 for WinGate has blocked access to http://bcfosterparents.ca/index.php.
The file is infected with Trojan.JS.Redirector.t
Contact your system administrator if you believe this page should not have been blocked
Kaspersky AntiVirus 2.0 for WinGate - http://www.wingate.com

--------------

2. Other clients are getting similar messages from other web site but with no indication as to why.

---------------

3. Email being blocked with no indication why. The sender resends and the email comes through fine. A lot of email has been blocked today with this message.

(Here is one I sent that was quarantined.)

X-Spam-Flag: NO
X-Envelope-From: accounting@ddp.ca
Return-Path: <accounting@ddp.ca>
Received: from defout.telus.net (defout.telus.net [199.185.220.240])
by mail126c0.megamailservers.com (8.13.6/8.13.1) with ESMTP id nBH0CCdh014685
for <***@***.com>; Wed, 16 Dec 2009 19:12:14 -0500
Received: from edtnaa01.telusplanet.net ([207.6.60.105])
by priv-edtnes25.telusplanet.net
(InterMail vM.7.08.04.00 201-2186-134-20080326) with ESMTP
id <20091217001211.KRUG28811.priv-edtnes25.telusplanet.net@edtnaa01.telusplanet.net>
for <***@***.com>; Wed, 16 Dec 2009 17:12:11 -0700
Received: from spirit.ddp (s207-6-60-105.bc.hsia.telus.net [207.6.60.105])
by edtnaa01.telusplanet.net (BorderWare Security Platform) with ESMTP id C6A4B0F3E39B3B68
for <***@***.com>; Wed, 16 Dec 2009 17:12:11 -0700 (MST)
Received: From accounting (unverified [10.0.0.150]) by SMTP Server [10.0.0.1]
(WinGate SMTP Receiver v6.5.2 (Build 1217)) with SMTP id <0000007755@spirit.ddp>;
Wed, 16 Dec 2009 16:01:20 -0800
Message-ID: <000a01ca7eac$1003f550$9600000a@DDP>
From: "DDP Accounting" <accounting@ddp.ca>
To: "***" <***@***.com>
Subject: test
Date: Wed, 16 Dec 2009 16:01:20 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01CA7E69.01D17310"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1983
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1983
X-MMR: 0
X-Antivirus: Scanned by F-Prot Antivirus (http://www.f-prot.com)
This is a multi-part message in MIME format.
------=_NextPart_000_0007_01CA7E69.01D17310
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
test
------=_NextPart_000_0007_01CA7E69.01D17310
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type

----------------

This is the message the recipients are getting with Reason: as blank:

-----Original Message-----
From: WinGate DataScanning [mailto:***@***.com]
Sent: Wednesday, December 16, 2009 9:43 AM
To: ***@***.com
Subject: Intercepted message
------------------------------------------------------------
WinGate DataScanning has blocked the following message:

Message: 0000002590
From: ***@sbcglobal.net
To: ***@***.com
Subject: December 1 through December 16
Size: 81835 bytes
Reason:
Please contact the Administrator ( ***@***.com ) to release this
email.
------------------------------------------------------------
Scanned by WinGate DataScanning: http://www.wingate.com
------------------------------------------------------------

4. Tried to do a Kaspersky update multiple times. All we get is:

Data file update for " Kaspersky AntiVirus for Wingate" could not be completed.


These problems are causing a lot of grief for my clients and they would like to know whats going on. Any help would be muchly appreciated.

Thanks - Al
alyork
 
Posts: 95
Joined: Jun 13 08 3:57 pm
Location: Vancouver, Canada

Return to Kaspersky AntiVirus for WinGate

Who is online

Users browsing this forum: No registered users and 17 guests

cron