show_ads[1].js

got the same problem spoke to Sophos support they are aware of the issue, but unsure of the cause just yet. Waiting for them to get back to me, will post more once i hear from them

are you getting the 'Troj/Phish-BS' as the virus detected?

We are also getting a heap of alerts with show_ads[1].js" belongs to virus/spyware 'Troj/Phish-BS'.  Did you ever get a resolution for this?

Just had this flag up as well with 'Troj/Phish-BS'.

I have just spoken with Sophos and they advised that this is (another) false positive.  They hope to have it resolved in the next couple of hours.

Any idea on the .ide causing the issue and an ETA when the fix will be pushed out  ?

They did not tell me which .ide was causing this issue, only that it had been released this afternoon and they did not have a specific ETA on a fix.

Looks like vb-afm.ide is the one causing the issue......

Thanks for the info

Hello Gaurav,

On 11 Oct 2012 00:52:04 +0000, Sophos issued the IDE vb-afm.ide. We have since received several reports from customers of a false positive reported as Troj/Phish-BS when browsing to sites
This should not impact the availability/functioning/readiness of Sophos products or impede the functioning of other software, however a number of websites have been noted to report the false positive.
The identity was marked clean in the cloud for Live Protection customers immediately and the removal of the identity is currently being published in the identity file vb-gcs.ide.
This has been released 11 Oct 2012 04:18:03 +0000

Regards,

Marco Soriano
Sophos Technical Support