Print

Print


http://www.google.com/search?aq=f&sourceid=chrome&ie=UTF-8&q=eset#sclient=psy&hl=en&biw=1920&bih=1139&source=hp&q=eset+has+found+suspicious+activity&aq=0&aqi=g1&aql=f&oq=&pbx=1&bav=on.2,or.r_gc.r_pw.&fp=a316b5cdb3fe9040

-----Original Message-----
From: David Genord II [mailto:[log in to unmask]] 
Sent: Monday, May 09, 2011 9:03 AM
To: [log in to unmask]
Subject: Re: [MSUNAG] Can a Webpage Detect your AV?

In theory you could detect any AV software with a direct browser protection component. All you would need to do is run a segment of code known to trigger the AV's protection system and detect the code's failure to run. The difficulty is maintaining the individual tests and making sure they don't collide. However, they don't need a 100% success rate to trap most casual visitors.

David Genord II

On Mon, May 9, 2011 at 8:39 AM, Al Puzzuoli <[log in to unmask]> wrote:
> I was looking up something on Google, clicked on a seemingly innocuous 
> webpage, and got the attached warning. This is clearly fake, but the 
> interesting thing is that I am indeed running the Eset product. I 
> wonder if this was just coincidental, or if there was code on this 
> page that was able to query my system and determine which AV was 
> running? If the latter is true, then I'm more than a little concerned, 
> Al
>
>