cancel
Showing results for 
Search instead for 
Did you mean: 
kmc
Level 12
Report Inappropriate Content
Message 1 of 5

Threat Source URL is Blank

Jump to solution

Hi All,

We have observed Trojan/Malware “JS/Exploit-Angler.m” detection by VSE in an internal machine, but the threat source URL is showing blank.

Is there anyway that we can find out which URL caused this alert trigger?


Thanks in advance


Regards,

Kotresha

1 Solution

Accepted Solutions

Re: Threat Source URL is Blank

Jump to solution

He's right from what I see if it was from a on-access scan. Here is the complete list of what you will capture.  SiteAdvisor installed, that captures it.

Complete list of Event IDs for VirusScan Enterprise

Technical Articles ID:  KB52417

McAfee KnowledgeBase - Complete list of Event IDs for VirusScan Enterprise

View solution in original post

4 Replies
Highlighted

Re: Threat Source URL is Blank

Jump to solution

What was the detection method? If it was just a on-demand scan, then no, because the file is already present on the system. No, if it was realtime- like scriptscan, it should have then reported the threat source if it was able too.

kmc
Level 12
Report Inappropriate Content
Message 3 of 5

Re: Threat Source URL is Blank

Jump to solution

This was On access scan, still we don't have any url entries for that.

during the time of the alert we check firewall logs but we only found that urls related to Microsoft "vortex-win.data.microsoft.com/"

Reliable Contributor andrep1
Reliable Contributor
Report Inappropriate Content
Message 4 of 5

Re: Threat Source URL is Blank

Jump to solution

the threat source url is not used by VSE

Re: Threat Source URL is Blank

Jump to solution

He's right from what I see if it was from a on-access scan. Here is the complete list of what you will capture.  SiteAdvisor installed, that captures it.

Complete list of Event IDs for VirusScan Enterprise

Technical Articles ID:  KB52417

McAfee KnowledgeBase - Complete list of Event IDs for VirusScan Enterprise

View solution in original post

More McAfee Tools to Help You

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community