Author Topic: Malicious url blocked message  (Read 2163 times)

0 Members and 1 Guest are viewing this topic.

Offline Clint501

  • Newbie
  • *
  • Posts: 3
Malicious url blocked message
« on: February 02, 2012, 04:15:49 PM »
I started getting this alert today. I've updated the VPS but it still occurs

See attached

Here is one site    http://forums.steves-digicams.com/close-ups-14/

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Malicious url blocked message
« Reply #1 on: February 02, 2012, 06:13:07 PM »
Well it isn't the site that you are visiting but its association with hXXp://simbeppc.com and that is what avast is blocking, image1. I use firefox and the NoScript add-on and I don't get an alert on that site as NoScript blocks all scripts including the simbeppc.com script, image2.

I have another question why is the process connecting to the site go36f4~1.dll and not your browser ?

Whilst avast doesn't like simbeppc.com ther are some AVs that don't like the pixel.js (javascript file), VirusTotal results on pixel.js file

Edit: Another analysis also considers this file and some others on that site suspicious, image3
« Last Edit: February 02, 2012, 06:19:29 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security