04-27-2012 12:39 PM
I received the following message from our web filter when downloading a BIOS Update utility for my Lenovo X61 Tablet. I could not find anywhere to report this and will not use this update unless I hear otherwise. I will provide the information in the message and the location from which I downloaded it:
This email is from the Barracuda Web Filter. We have detected and blocked the download of: VIRUS DOS.Junkie-1
from the server:download.lenovo.com
This download was for the BIOS Updated CD.
Solved! Go to Solution.
04-27-2012 12:51 PM - edited 04-27-2012 12:52 PM
I've just downloaded the file (twice) and also scanned it after downloading without receiving any warning. I have ESET Smart Security 4 business edition installed on my system.
Are you able to try downloading with a different system, or maybe other members could chime in who have different setups?
Please remember to come back and mark the post that you feel solved your question as the solution, it earns the member + pointsDid you find a post helpfull? You can thank the member by clicking on the star to the left awarding them Kudos
04-27-2012 02:22 PM
I've noted this for our support team and we'll check out the file and the page. Several of the forum mods have tested with different packages and didn't find anything reported.
Do you have an AV program on your system and have you tried a scan of your system yet? If not, might be a good idea as a precaution.
Thanks for reporting this.
04-27-2012 07:56 PM
I downloaded and scanned it with the latest kaspersky internet security, which reports it's clean.
This is most likely what's referred to as a "false positive"
It might be a sign that you need to consider a different anti virus program, or at very least report this to your current anti virus so they can test it and fix the problem on their end. If they find something that they really believe is a threat, they can provide the proper technical information direct to lenovo, but I believe it's just a simple error on their virus definition database.
04-29-2012 12:58 AM
04-30-2012 08:08 AM
I also scanned the file and used both Symantec AV Corporate and AVG and found no problems. There has been no other activity or problem that points to any danger. The only indication that has created any concern is the report we received from this Barracuda web filter. I think I will forward this information to them. Otherwise, I think we can consider this on non-issue and this thread can be closed. Thanks for your attention.
04-30-2012 08:53 AM
Thanks for the follow up - much appreciated. Likewise, thanks to all the other community members who dived in to help test and determine if this were real or a false positive. Better safe than sorry!
05-01-2012 01:21 AM
I just downloaded a copy of the ThinkPad X31 BIOS update and then re-uploaded it to VirusTotal, OPSWAT's Metascan and Jotti's VirusScan, which are the three most popular "meta-engine" virus scanning web sites and between them use about ninety antivirus programs to scan uploaded files, although there is quite a bit of overlap between them.
Here are the results:
Although the last one does sound a little alarming, in the context of which engines detected a threat, and what was detected, (an old DOS-era virus, apparently) I think it is very likely you are seeing a report of a false alarm, e.g., a claim that virus is present when none actually exists.