topic Suspicious DNS Query (generic:msreg.gale.com)(4034267) in General Topics

Suspicious DNS Query (generic:msreg.gale.com)(4034267)

SOC_CSG — Wed, 29 Jan 2014 14:07:32 GMT

I didn't find many about this domain "msreg.gale.com", Could someone help me to determine whether or not a false positvo??

In the link below say it is not malware.

It's Word 2007 - "Connecting To" Pop-ups

http://social.technet.microsoft.com/Forums/office/en-US/81a9d0a3-667c-4637-8d4d-1957120ec015/word-2007-connecting-to-popups?forum=word

Thanks,

dicu

Re: Suspicious DNS Query (generic:msreg.gale.com)(4034267)

HULK — Wed, 29 Jan 2014 15:10:02 GMT

Hello Dicu,

Content team already investigated the issue and notified that this is not a false positive. Wildfire detected malware sample try to visit this domain "msreg.gale.com", which is not even resolvable.

Bug 60355 - Suspicious DNS Query (generic:msreg.gale.com) - TID 4034267

Hope this helps.