Author Topic: avast blocking piriform forum  (Read 16223 times)

0 Members and 1 Guest are viewing this topic.

JohnnyBob

  • Guest
avast blocking piriform forum
« on: November 02, 2012, 07:35:54 AM »
avast blocking piriform forum

http://forum.piriform.com/

Sometimes I get an avast popup saying it is blocking a virus, sometimes not, but I always get:

Fatal error: require_once() [function.require]: Failed opening required './initdata.php' (include_path='.:/usr/local/php53/pear') in /home/ccleaner/public_html/index.php on line 23

anybody else?

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

JohnnyBob

  • Guest
Re: avast blocking piriform forum
« Reply #2 on: November 02, 2012, 08:23:46 AM »
Thanks for the links. The first time I tried the zscaler.com link, it said forum.piriform.com is OK. The second time is said it is malicious. The securi.net link reports it as malicious.

forum.piriform.com is an old established forum. I don't go there frequently so don't know how long this problem has existed. Of course they could be infected but I doubt it. I suspect it's just a bug in their code. I tried to email their webmaster but it was returned as undeliverable.
« Last Edit: November 02, 2012, 08:28:55 AM by JohnnyBob »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: avast blocking piriform forum
« Reply #3 on: November 02, 2012, 08:29:11 AM »
1. Thanks for the links.
2. I've emailed their webmaster.

1. You're welcome.
2. Good.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37507
  • Not a avast user
Re: avast blocking piriform forum
« Reply #4 on: November 02, 2012, 08:36:45 AM »
Quote
Of course they could be infected but I doubt it.
of cours not....avast must be wrong  ;)

http://urlquery.net/report.php?id=77737

and the site seems to be down now


we have a article somwhere in here (cant find the link now) about infected websites hacked/found every 3,5sek



Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: avast blocking piriform forum
« Reply #5 on: November 02, 2012, 08:38:45 AM »
Quote
Of course they could be infected but I doubt it.
of cours not....avast must be wrong  ;)

They always say that... ::)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

JohnnyBob

  • Guest
Re: avast blocking piriform forum
« Reply #6 on: November 02, 2012, 08:48:46 AM »
According to the following 2 testers, forum.piriform.com is up
http://www.isup.me/forum.piriform.com
http://host-tracker.com/check_res_ajx/11494891-0/

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37507
  • Not a avast user
Re: avast blocking piriform forum
« Reply #7 on: November 02, 2012, 08:50:19 AM »
found it

Every 3.6 seconds a website is infected
http://www.scmagazine.com/every-36-seconds-a-website-is-infected/article/140414/

noting is 100% secure......
and the more people that visit a site, the more interesting it is for thew bad guys to infect as they fish in the pond that have most fish.....bigger chanse that somone take the bait

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37507
  • Not a avast user
Re: avast blocking piriform forum
« Reply #8 on: November 02, 2012, 08:52:04 AM »
According to the following 2 testers, forum.piriform.com is up
http://www.isup.me/forum.piriform.com
http://host-tracker.com/check_res_ajx/11494891-0/

see the urlQuery link i posted above.....click the picture in top right corner

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: avast blocking piriform forum
« Reply #9 on: November 02, 2012, 03:09:48 PM »
Any site can get infected... Geeks to Go was hit about a year back, only Avast spotted it.  The site was down for a day whilst they cleared the redirect malware

EDIT:  A hack has been confirmed, cleaning it now 
« Last Edit: November 02, 2012, 03:29:44 PM by essexboy »

JohnnyBob

  • Guest
Re: avast blocking piriform forum
« Reply #10 on: November 02, 2012, 03:36:41 PM »
I'm not getting the avast block anymore (are you?), just
Fatal error: require_once() [function.require]: Failed opening required './initdata.php' (include_path='.:/usr/local/php53/pear') in /home/ccleaner/public_html/index.php on line 41
So I think this is a case of a buggy website, not a virus. They've cut themselves off from the outer world by making their registration private and not providing a working email address to contact them. So they may still be unaware.

true indian

  • Guest
Re: avast blocking piriform forum
« Reply #11 on: November 02, 2012, 03:56:11 PM »
there is infection there...better not go there  ::)

JohnnyBob

  • Guest
Re: avast blocking piriform forum
« Reply #12 on: November 02, 2012, 04:04:36 PM »
there is infection there...better not go there  ::)
I can't. Apparently nobody can because of the website coding bug. It's not working. I doubt that it is a virus.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: avast blocking piriform forum
« Reply #13 on: November 02, 2012, 04:05:56 PM »
Neither Eset nor MBAM will allow you to go there , so methinks an infection is the best bet

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88898
  • No support PMs thanks
Re: avast blocking piriform forum
« Reply #14 on: November 02, 2012, 04:07:16 PM »
Lets put it this way, why would piriform.com, a UK Company, be connecting to a Russian IP address (rather than a plain language domain name), at best that is obfuscation, at worst highly suspect.

http://en.wikipedia.org/wiki/Piriform_%28company%29.
Quote
"Piriform is a privately owned software house based in the West End of London, UK"

Though server appears to be in Texas.

When this is in relation to an iframe, I get even more suspicious as it reeks of iframe injection. Look further and you will find that the 46.166.147.133 IP address is on the avast malicious sites list and WOT doesn't like it either. I'm sure if you do any further analysis on the 46.166.147.133 IP you will no doubt find more, so it looks like an iframe injection attack on piriform.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security