cancel
Showing results for 
Search instead for 
Did you mean: 
Reliable Contributor kmc
Reliable Contributor
Report Inappropriate Content
Message 1 of 5

Threat Source URL is Blank

Jump to solution

Hi All,

We have observed Trojan/Malware “JS/Exploit-Angler.m” detection by VSE in an internal machine, but the threat source URL is showing blank.

Is there anyway that we can find out which URL caused this alert trigger?


Thanks in advance


Regards,

Kotresha

1 Solution

Accepted Solutions

Re: Threat Source URL is Blank

Jump to solution

He's right from what I see if it was from a on-access scan. Here is the complete list of what you will capture.  SiteAdvisor installed, that captures it.

Complete list of Event IDs for VirusScan Enterprise

Technical Articles ID:  KB52417

McAfee KnowledgeBase - Complete list of Event IDs for VirusScan Enterprise

4 Replies
Highlighted

Re: Threat Source URL is Blank

Jump to solution

What was the detection method? If it was just a on-demand scan, then no, because the file is already present on the system. No, if it was realtime- like scriptscan, it should have then reported the threat source if it was able too.

Reliable Contributor kmc
Reliable Contributor
Report Inappropriate Content
Message 3 of 5

Re: Threat Source URL is Blank

Jump to solution

This was On access scan, still we don't have any url entries for that.

during the time of the alert we check firewall logs but we only found that urls related to Microsoft "vortex-win.data.microsoft.com/"

andrep1
Level 14
Report Inappropriate Content
Message 4 of 5

Re: Threat Source URL is Blank

Jump to solution

the threat source url is not used by VSE

Re: Threat Source URL is Blank

Jump to solution

He's right from what I see if it was from a on-access scan. Here is the complete list of what you will capture.  SiteAdvisor installed, that captures it.

Complete list of Event IDs for VirusScan Enterprise

Technical Articles ID:  KB52417

McAfee KnowledgeBase - Complete list of Event IDs for VirusScan Enterprise

Member Rewards
McAfee Community rewards active and helpful members just like you. Click here to take a look at the first community members who received a special reward and were recognized by McAfee leader, Aneel Jaeel, for their participation and trusted knowledge in the community.