Author Topic: URL Mal reported by Network Shield: False Positive?  (Read 4123 times)

0 Members and 1 Guest are viewing this topic.

bestmen

  • Guest
URL Mal reported by Network Shield: False Positive?
« on: October 03, 2012, 06:45:15 PM »
Hi,

avast's network shield reports a URL Mal on the following site:

DasBlondinchen.blogspot.de

Is this a false positive?

Thank you!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37531
  • Not a avast user

bestmen

  • Guest
Re: URL Mal reported by Network Shield: False Positive?
« Reply #2 on: October 03, 2012, 07:03:14 PM »
Thank you. So this means that the site is indeed malicious right? Sorry to ask but I am not that familiar with these  things.
 
What exactly has Avast blocked here? The site? A file?

Thanks

Edit: this is the result form VT on what sucuri has as suspicious
https://www.virustotal.com/url/a9aee7b7a3a36c6aa54e385d26750c78c1682b6cf98f5bd15dcfdcbfd53cf223/analysis/1349284298/
« Last Edit: October 03, 2012, 07:13:54 PM by bestmen »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37531
  • Not a avast user
Re: URL Mal reported by Network Shield: False Positive?
« Reply #3 on: October 03, 2012, 07:13:32 PM »
URL.mal means the url is on a block list

this is what sucuri say
http://labs.sucuri.net/db/malware/malware-entry-mwblacklisted35



you may post a screenshot of the avast popup so we can see

bestmen

  • Guest
Re: URL Mal reported by Network Shield: False Positive?
« Reply #4 on: October 03, 2012, 07:28:11 PM »
This is the Avast report file from the Network Shield. I hope this is even more informative.

The last entry from today is the one.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: URL Mal reported by Network Shield: False Positive?
« Reply #5 on: October 03, 2012, 09:06:25 PM »
Site's rel canonical tag pointing to another domain, that is being flagged...

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

bestmen

  • Guest
Re: URL Mal reported by Network Shield: False Positive?
« Reply #6 on: October 03, 2012, 10:02:07 PM »
Ok.

Two questions:

This warning by Avast is purely based on a blacklist and has nothing to do with a scan of the visited site right?

Did Avast block complete access to the site or rather domain ? So No immediate danger?

Thanks!