Kaspersky Says Google Spreads Malware, but Trojan.JS.Redirector.ar Is a False Positive

Kaspersky products incorrectly blocked access to legitimate websites reporting that ads from Google AdSense were infected with a Trojan horse labeled Trojan.JS.Redirector.ar. Russian-based antivirus maker Kaspersky managed to shoot itself in the foot and deliver a blow to its credibility and legitimacy as a maker of security solution. Again. But while shooting itself in the foot, Kaspersky also hurt its own users and damaged legitimate Internet-based businesses, by falsely alerting customers of its most recent and “top of the line” AV product that Google is spreading malware through AdSense. Again!

Despite the erroneous alerts from Kaspersky Internet Security 2010, Google AdSense is not infecting users with malware, and Trojan.JS.Redirector.ar is a false positive. In fact, customers, including Softpedia users, should disregard alerts from Kaspersky altogether when their very common sense is telling them otherwise. And it’s not just customers running Kaspersky Internet Security 2010 that were affected, but also users of Kaspersky Anti-Virus 2010, Kaspersky Internet Security 2009, Kaspersky Anti-Virus 2009 and Kaspersky Anti-Virus 6.0 for Windows Workstations MP4. Users need to know that Softpedia has taken extensive measure to ensure that its users are protected, and only serves advertising from legitimate sources, such as Google, that have a proven track record of also protecting customers.

They should definitely ignore reports associated with Trojan.JS.Redirector.ar infections in Google AdSense. “On the 25th of January, 2010, some Google web pages can be blocked by your Kaspersky Lab product because of virus detection. In this case the following message appears on the screen: Access denied. The following error was encountered: The requested object is INFECTED with the following viruses: Trojan.JS.Redirector.ar,” Kaspersky Lab stated.

But there are additional false positive alerts to be ignored. “In such cases Kaspersky Lab products may display the message that the requested object is infected with one of the following viruses:
- Backdoor.Win32.Hupigon.jrpd,
- Trojan.Win32.Generic,
- Trojan.Win32.Swisyn.nik,
- Win32.KillFiles.b,
- Win32.StartPage.c,
- Win32.StartPage.d,
- Win32.StartPage.e,
- Win32.StartPage.f,
- Win32.StartPage.g.
- Win32.StartPage.h,
- Win32.Trojan-Downloader.Generic.ac,
- Win32.Trojan-Downloader.Generic.ad,
- Win32.Trojan-Downloader.Generic.ai.
Such detections of the viruses mentioned above on some Google web pages are false alarms,” Kaspersky added.

adopted from http://www.softpedia.com