Virus in µSupply PDF schematic file - Page 1
Forum section: electronics / projects

author: nbritton
author_rank: Frequent Contributor
timestamp: September 29, 2015, 11:03:58 pm
content: In the attached screenshot I got an error message saying there was a virus in the µSupply PDF schematic file.

author: EEVblog
author_rank: Unknown
timestamp: September 29, 2015, 11:14:26 pm
content: I've got no idea, sorry

author: dom0
author_rank: Super Contributor
timestamp: September 29, 2015, 11:31:11 pm
content: Some bullshit snakeoil 'security' software on your network.

author: lewis
author_rank: Frequent Contributor
timestamp: September 29, 2015, 11:34:49 pm
content: Works well for me, and I use Microsoft Security Essentials so itmustbe OK

author: retiredcaps
author_rank: Super Contributor
timestamp: September 29, 2015, 11:39:32 pm
content: This site using multiple scan engines?https://www.virustotal.com/seems to thinkwww.eevblog.com/files/uSupplyBenchRevC.pdfis okay.

author: amyk
author_rank: Super Contributor
timestamp: September 30, 2015, 12:32:12 am
content: That file does contain embedded JavaScript which could catch the attention of some security software. Does the attached version, which I've removed the JS from, trigger the warning?

author: nbritton
author_rank: Frequent Contributor
timestamp: September 30, 2015, 01:56:56 am
content: Quote from: amyk on September 30, 2015, 12:32:12 amI'm not at work anymore so I can't test that. I tried viewing the original file again at home, using the same computer, and it loaded the file without that error message, this tells me that something on our corporate network is flagging the file as bad. I work for Hewlett Packard Enterprise.

author: dadler
author_rank: Unknown
timestamp: September 30, 2015, 03:28:30 am
content: Your browser is infected with Jira like mine is

author: calexanian
author_rank: Super Contributor
timestamp: September 30, 2015, 06:27:21 am
content: My Puppy Linux ha no problem with it. O0

author: lukaq
author_rank: Regular Contributor
timestamp: September 30, 2015, 06:48:08 am
content: yes, no problem over here also with eset

author: lapm
author_rank: Frequent Contributor
timestamp: September 30, 2015, 03:50:27 pm
content: F-secure says nothing about virus. So your machine must have some other infection that's try's to sell you that BS.. That error message looks like tailored to scare non-technical people..

author: Kleinstein
author_rank: Super Contributor
timestamp: September 30, 2015, 04:29:45 pm
content: With a large number of viruses and a large number of files, there is a certain properbility that a virus signature is found just by coincidence. At least the message does not look specific for an infected PDF type "virus".

author: Maxlor
author_rank: Frequent Contributor
timestamp: September 30, 2015, 09:38:28 pm
content: There is no virus. Your work proxy transparently scans all files going through, and for some reason chokes on that PDF. Rather than let a file go through unchecked, it blocks it.Here's another fun exercise: access some SSL-encrypted page, and check the certificate chain. I bet your employer is sneakily doing a man-in-the-middle attack on your encrypted connections, without having told you, and gets away with it because he can pre-install his own certificates on your work computer so you don't notice.