Hi,
This morning I am getting warnings about google analytics tracker being a high risk website:
****************** Sophos Anti-Virus Log - 10/06/2011 08:23:26 **************
20110610 081843Using detection data version 4.66G (detection engine 3.20.2). This version can detect 2622265 items.
20110610 081843User (NT AUTHORITY\LOCAL SERVICE) has started on-access scanning for this machine.
20110610 081954Blocked web request to "www.google-analytics.com/__utm.gif" for user Ned-VAIO\Ned. 'Mal/HTMLGen-A' has been found at this website, reference ID 264964.
20110610 082006Blocked web request to "www.google-analytics.com/siteopt.js" (linked from "www.sophos.com") for user Ned-VAIO\Ned. 'Mal/HTMLGen-A' has been found at this website, reference ID 264964.
20110610 082014Blocked web request to "www.google-analytics.com/__utm.gif" (linked from "www.sophos.com/support") for user Ned-VAIO\Ned. 'Mal/HTMLGen-A' has been found at this website, reference ID 264964.
20110610 082022Blocked web request to "www.google-analytics.com/__utm.gif" (linked from "www.sophos.com/en-us/Search-Results.aspx") for user Ned-VAIO\Ned. 'Mal/HTMLGen-A' has been found at this website, reference ID 264964.
20110610 082032Blocked web request to "www.google-analytics.com/__utm.gif" (linked from "www.sophos.com/support/knowledgebase/article/110579.html") for user Ned-VAIO\Ned. 'Mal/HTMLGen-A' has been found at this website, reference ID 264964.
20110610 082059Blocked web request to "www.google-analytics.com/__utm.gif" (linked from "www.sophos.com/support/queries") for user Ned-VAIO\Ned. 'Mal/HTMLGen-A' has been found at this website, reference ID 264964.
20110610 082108Blocked web request to "www.google-analytics.com/__utm.gif" (linked from "community.sophos.com") for user Ned-VAIO\Ned. 'Mal/HTMLGen-A' has been found at this website, reference ID 264964.
20110610 082138Blocked web request to "www.google-analytics.com/__utm.gif" (linked from "community.sophos.com/t5/Sophos-Endpoint-Security-and/bd-p/ESDP") for user Ned-VAIO\Ned. 'Mal/HTMLGen-A' has been found at this website, reference ID 264964.
20110610 082214Blocked web request to "www.google-analytics.com/__utm.gif" (linked from "community.sophos.com/t5/forums/postpage/board-id/ESDP") for user Ned-VAIO\Ned. 'Mal/HTMLGen-A' has been found at this website, reference ID 264964.
Is this sophos incorrectly identifying this or google actually sending malware down their analytics?
This thread was automatically locked due to age.
