1 Reply Latest reply on Dec 12, 2011 5:44 PM by Jon Scholten

    Mywebsearch

      Kind of wondering if any other admins have seen this much before or know anything more about it?  Access to sites are being blocked as a result of this signature.  Is there a place I can look for signature information?

       

      Media Type application/x-www-form-urlencoded
      Virus Name McAfeeGW:Unwanted.MyWebSearch.gen!92


       

        • 1. Re: Mywebsearch
          Jon Scholten

          That typically occurs because a user machine was previously (or still is) infected with "MyWebSearch". It will embed itself into the user-agent of the browser (IE) and then Web Gateway will see this and recognize it as a PUP (potentially unwanted program), and block it. To test this you could disable "PUP" detection which are in the engine settings at the bottom ("Block requests sent by PUPs"). I like this option as it will make you aware that the machine has had (or has) a virus potentially installed.

           

          ~Jon