Jump to content

Compiled ASP.NET web app on local machine creates positive

codesmithery

By codesmithery
in File Detections

 Share

Recommended Posts

codesmithery

codesmithery

Posted
Posted

I am getting the following error when trying to run a web application I am building (the application is an existing application that I have been working on for over 7 years).

Update, 12/23/2014 2:28:43 PM, SYSTEM, M, Scheduler, Rootkit Database, 2014.12.23.1, 2014.12.23.2,

Protection, 12/23/2014 2:28:43 PM, SYSTEM, M, Protection, Refresh, Starting,

Protection, 12/23/2014 2:28:43 PM, SYSTEM, M, Protection, Malicious Website Protection, Stopping,

Protection, 12/23/2014 2:28:43 PM, SYSTEM, M, Protection, Malicious Website Protection, Stopped,

Protection, 12/23/2014 2:28:53 PM, SYSTEM, M, Protection, Refresh, Success,

Protection, 12/23/2014 2:28:53 PM, SYSTEM, M, Protection, Malicious Website Protection, Starting,

Protection, 12/23/2014 2:28:53 PM, SYSTEM, M, Protection, Malicious Website Protection, Started,

Detection, 12/23/2014 4:38:29 PM, SYSTEM, M, Protection, Malware Protection, File, Trojan.MSIL.ED, C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\cervelo.rma.v4\993b700e\a741cb95\App_GlobalResources.twt0whf0.dll, Quarantine Failed, 5, Access is denied. , [c47f1155502cad891599b4475fa20ff1]

Detection, 12/23/2014 4:38:33 PM, SYSTEM, M, Protection, Malware Protection, File, Trojan.MSIL.ED, C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\cervelo.rma.v4\993b700e\a741cb95\App_GlobalResources.vtgvgiyf.dll, Quarantine Failed, 5, Access is denied. , [ad96e1859ae250e6a40ab744b64b857b]

Detection, 12/23/2014 4:39:13 PM, SYSTEM, M, Protection, Malware Protection, File, Trojan.MSIL.ED, C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\cervelo.rma.v4\993b700e\a741cb95\App_GlobalResources.i6fe9khi.dll, Quarantine Failed, 5, Access is denied. , [4102d98d5b21be78347a2bd012ef9f61]

Detection, 12/23/2014 4:41:01 PM, SYSTEM, M, Protection, Malware Protection, File, Trojan.MSIL.ED, C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\cervelo.rma.v4\993b700e\a741cb95\App_GlobalResources.lzfutpzd.dll, Quarantine Failed, 5, Access is denied. , [9ca772f4413b2016416d34c7e41d17e9]

Detection, 12/23/2014 4:44:54 PM, SYSTEM, M, Protection, Malware Protection, File, Trojan.MSIL.ED, C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\focus\0b353ad7\f6a9e84f\App_GlobalResources.qyvhafcd.dll, Quarantine Failed, 5, Access is denied. , [093abea8f28a26105757ca3137caf30d]

Detection, 12/23/2014 4:46:29 PM, SYSTEM, M, Protection, Malware Protection, File, Trojan.MSIL.ED, C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\focus\0b353ad7\f6a9e84f\App_GlobalResources.zkn8hsac.dll, Quarantine Failed, 5, Access is denied. , [55ee3d29ff7d1d19119d1edd3ec39967]

Update, 12/23/2014 4:53:34 PM, SYSTEM, M, Manual, Malware Database, 2014.12.23.7, 2014.12.23.8,

Protection, 12/23/2014 4:53:34 PM, SYSTEM, M, Protection, Refresh, Starting,

Protection, 12/23/2014 4:53:34 PM, SYSTEM, M, Protection, Malicious Website Protection, Stopping,

Protection, 12/23/2014 4:53:34 PM, SYSTEM, M, Protection, Malicious Website Protection, Stopped,

Protection, 12/23/2014 4:53:46 PM, SYSTEM, M, Protection, Refresh, Success,

Protection, 12/23/2014 4:53:46 PM, SYSTEM, M, Protection, Malicious Website Protection, Starting,

Protection, 12/23/2014 4:53:46 PM, SYSTEM, M, Protection, Malicious Website Protection, Started,

Detection, 12/23/2014 4:54:52 PM, SYSTEM, M, Protection, Malware Protection, File, Trojan.MSIL.ED, C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\cervelo.rma.v4\993b700e\a741cb95\App_GlobalResources.w60pabos.dll, Quarantine Failed, 5, Access is denied. , [1a2a363084f8bb7bf5bc11ea778a24dc]

Detection, 12/23/2014 4:55:26 PM, SYSTEM, M, Protection, Malware Protection, File, Trojan.MSIL.ED, C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\focus\0b353ad7\f6a9e84f\App_GlobalResources.wiuoltlj.dll, Quarantine Failed, 5, Access is denied. , [96aee3832557f4422988fdfe09f8768a]

Detection, 12/23/2014 4:55:56 PM, SYSTEM, M, Protection, Malware Protection, File, Trojan.MSIL.ED, C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\focus\0b353ad7\f6a9e84f\App_GlobalResources.fkhzqmpc.dll, Quarantine Failed, 5, Access is denied. , [1c28c99d017bc0765b564bb04cb5d729]

Detection, 12/23/2014 4:57:25 PM, SYSTEM, M, Protection, Malware Protection, File, Trojan.MSIL.ED, C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\focus\0b353ad7\f6a9e84f\App_GlobalResources.ptxi-vgf.dll, Quarantine Failed, 5, Access is denied. , [58ec580e2b51c175466bce2d887910f0]

 

 

It appears to affect two web sites within the same project. However, on a different project, I do not get the same error even though the same files are contain with the project in that particular folder of the source code. The error occurs when I try loading the web site on my local machine (which is where I am developing it). Problem is, I am trying to solve a problem and this has stopped me dead in my tracks.

I have attached the DLL in question.

app_global.zip

Link to post
Share on other sites
codesmithery

codesmithery

Posted
  • Author
Posted

Rich, I just did a custom scan and it flagged pretty much all my compiled projects. All of them were the App_GlobalResources DLL. FYI, the App_GlobalResources is a folder that ASP.NET compiles into a single DLL. It is a system folder as such and the programmer really has no control over how it is compiled. The programmer only has control as to the resource file contents they put into the folder.

Link to post
Share on other sites
codesmithery

codesmithery

Posted
  • Author
Posted

Rich, I figured as much. But there is nothing I or any other developer can do about that because VisualStudio builds that file. I precompile my web sites, but, if the source is deployed on the web server, ASP.NET will compile the file the first time the web site is requested.

 

Many of the compile files of ASP.NET do not have a version or the 0.0.0.0 version numbers. I believe this has been the case since ASP.NET debuted over 15 years ago.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.