This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPS False Alarm? - mygpuid.com

I saw in the German forum a few people reported this. Anyone else get an email last night or recently about IPS - mygpuid.com, C2/Generic-A, origin DNS?

This is on a UTM320 - v 9.201-23

I ran two different AV scanners on the server, on top of the one already install, all of which found nothing.

-Jim

This thread was automatically locked due to age.

0 tekpoint over 11 years ago

Yes here too. I am also following that thread on ther german forum as more people seem to react overthere (and it turned to english anyway [:)] )
https://community.sophos.com/products/unified-threat-management/astaroorg/f/68/t/62451
Cancel
Vote Up 0 Vote Down

Cancel
0 Acaelus over 11 years ago in reply to tekpoint

I too received this alert and doesn't seem like anyone on the German thread has any idea what triggered it as of yet. Scrubbed the indicated machine and found nothing. Anyone else have any insight?
Cancel
Vote Up 0 Vote Down

Cancel
0 Steveh100 over 11 years ago

Same problem for me. Four warnings so far over two days. The PC checked out as clean.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago

Hi, the full log entries from the IPS or AFC logs would be helpful; I don't see them in the other thread either (just something from the http log it looks like, but I can't read the German in the log)

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 robertobrinsky over 11 years ago

I had a client who also ran into this. When I try to go to that site, all I get is Google. This seems to be consistent with the information from this website.
urlquery.net - Free url scanner
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael Dunn over 11 years ago

Brief answer:
The domain is associated with a PUA that is likely collecting browser history or advertising data but is technically not malware. The domain has been removed from ATP.

Please see my full reply in this thread:
https://community.sophos.com/products/unified-threat-management/astaroorg/f/81/t/65548
Cancel
Vote Up 0 Vote Down

Cancel