Author Topic: Network shield malicious sites  (Read 5063 times)

0 Members and 1 Guest are viewing this topic.

adi_dmj

  • Guest
Network shield malicious sites
« on: January 28, 2009, 08:09:36 PM »
Hi,
avast network shield gave me few warning that it has blocked connection to some maliciuous sites ,it displayed the site name and process svchost.exe

I serched in forum and found one thread  to it , saying it is over 20days unless you ares ure you want to reply start a new thread, so i have started a new thread.

how avst decides that a particular site is malicious and it displays the site name and process name I am totally confused the error message is as follows

27.12.2008  23:57:53  Network Shield: blocked access to malicious site dns://www.themoviedownloads.com [ C:\WINDOWS\system32\svchost.exe ]

some body please throw some light on it

Thank you

adi

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89029
  • No support PMs thanks
Re: Network shield malicious sites
« Reply #1 on: January 28, 2009, 08:45:15 PM »
The svchost.exe is purely the messenger doing its bidding, it is what gets the dns IP address details for the domain name .

So were 'you' trying to connect to the wXw.themoviedownloads.com site, e.g. you clicked on a link for it.

WOT (Web Of Trust) doesn't like the site either, http://www.mywot.com/en/scorecard/themoviedownloads.com, just check out that page and you will see why avast doesn't like it either
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

CharleyO

  • Guest
Re: Network shield malicious sites
« Reply #2 on: January 29, 2009, 09:08:31 PM »
***

ScanDoo says the site is bad. Click the image below to enlarge.


***

Nameless13

  • Guest
Re: Network shield malicious sites
« Reply #3 on: February 02, 2009, 10:23:24 AM »
Hi, everyone!
It worry me that network shield did not blocking this malicious site http://91.205.111.57/freeporn/
But network shield blocking this site http://91.205.111.57/freeporn
02.02.2009  11:38:37  Network Shield: blocked access to malicious site 91.205.111.50/freeporn [ C:\Program Files\Internet Explorer\iexplore.exe ]
Ask to creators investigate in this one.

kubecj

  • Guest
Re: Network shield malicious sites
« Reply #4 on: February 02, 2009, 11:23:04 AM »
Strange, can't find any reference to the in url blocker data?

Nameless13

  • Guest
Re: Network shield malicious sites
« Reply #5 on: February 04, 2009, 04:46:01 PM »
Strange, can't find any reference to the in url blocker data?
I don't know ???
But, itself word freeporn did not filtering (therefore, with slash [/] site did not blocking). Please, add this to black list in network shield.

Nameless13

  • Guest
Re: Network shield malicious sites
« Reply #6 on: February 06, 2009, 01:43:55 PM »
Today, I'm update AVAST! programm, but network shield still did not blocking malicious site with slash. :-[

Offline Bluesman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 926
  • Amiga Power!
Re: Network shield malicious sites
« Reply #7 on: February 06, 2009, 10:14:29 PM »
Today, I'm update AVAST! programm, but network shield still did not blocking malicious site with slash. :-[

Post your request in the Wishlist thread

http://forum.avast.com/index.php?topic=12640.0
"The blues are the roots, everything else is the fruits" -Willie Dixon

Nameless13

  • Guest
Re: Network shield malicious sites
« Reply #8 on: February 07, 2009, 09:31:33 AM »
Thanks for the tip :)

kubecj

  • Guest
Re: Network shield malicious sites
« Reply #9 on: February 07, 2009, 11:56:17 AM »
What I'm saying is that we don't have any blocking record to the site you mentioned, slash or no slash.  ;)