Skip to main content
seadave
New Member
March 2, 2016
Question

Lots of hits today for JS/Iframe.MO!tr

  • March 2, 2016
  • 3 replies
  • 5913 views

Seems to be associated with various file names.  Coming from multiple sites.  A campaign or red herring?  Anyone else seeing this?

    3 replies

    maciekh
    New Member
    March 3, 2016

    I can confirm that, in my case while entering bank site...

    False positive submission perhaps?

    darionsr
    New Member
    March 3, 2016

    Hello seadave,

     

    Im in the same situation, a lot of Antivirus Logs:

    File name: _Incapsula_Resource?SWJIYLWA=2977d8d74f63d7f8fedbea018b7a1d05&ns=1

    Virus/Botnet: JS/Iframe.MO!tr

     

    We wait for news.

    maciekh
    New Member
    March 3, 2016

    Our case is also with Incapsula

     

    ./_Incapsula_Resource?SWJIYLWA=2977d8d74f63d7f8fedbea018b7a1d05&ns=1

     

    maciekh
    New Member
    March 3, 2016

    Dear customer,  Thanks for bringing this issue to us. The detection has been removed since version 32.990 and the updated version for now is 33.009. 

     

    So we need to upgrade virus definitions :)

    darionsr
    New Member
    March 3, 2016

    Our Fortigate has been update from 33.00008 to 33.00011 versión.

     

    Let's hope this will solve the problem.

     

    Thanks.