Author Topic: Avast está bloqueando meu Site  (Read 22840 times)

Offline ti.colmaster

  • Newbie
  • *
  • Posts: 6
    • Personal Message (Offline)
Avast está bloqueando meu Site
« on: January 04, 2011, 11:06:12 AM »
O Avast está bloqueando meu site hxxp://www.colmaster.com.br
Não foi encontrado nada pelo serviço de hospedagem.

Offline spg SCOTT

  • Massive Poster
  • ****
  • Posts: 4138
  • Gender: Male
  • There is no magic, only lost physics
    • spg SCOTT
    • Personal Message (Offline)
Re: Avast está bloqueando meu Site
« Reply #1 on: January 04, 2011, 11:35:35 AM »
Hi ti.colmaster, welcome to the forum :)

First, this site is blocked by the network shield.

The web shield also alerts on a script inside the site.

It seems as though one of the javesript files on the site are infected. I have looked through and I think that the script in:
Code: [Select]
hXXp://wXw.colmaster.com.br/misc/jquery.jsis infected. This script is a very long script that appears to be obfuscated, and is suspocious...

I am not completely sure, but this could be the issue. I will have to ask one of the avast! team about this.

Scott

EDIT: apologies for the non translation, I have asked someone who knows the language to translate
« Last Edit: January 04, 2011, 11:41:26 AM by spg SCOTT »
“There is a computer disease that anybody who works with computers knows about. It's a very serious disease and it interferes completely with the work. The trouble with computers is that you 'play' with them!”Richard Feynman

Offline Tech

  • avast! team
  • Certainly Bot
  • *
  • Posts: 64880
  • Gender: Male
    • Personal Message (Offline)
Re: Avast está bloqueando meu Site
« Reply #2 on: January 04, 2011, 11:41:24 AM »
Hi ti.colmaster, bem-vindo aos foruns :)
Primeiramente, este site foi bloqueado pelo Módulo Rede.
O Módulo Internet também alerta para um script dentro do site.
Parece que alguns arquivos javasript do site files estão infectados. Eu olhei atentamente e acho que que o script
Code: [Select]
hXXp://wXw.colmaster.com.br/misc/jquery.jsestá infectado. Este script é muito longo e parece estar encriptado/obfuscado, e, por isso, é suspeito...
Não estou completamente seguro, mas esta parece ser a causa. Você terá de perguntar/esperar por alguém da equipe do avast para resolver isso.
Scott
Translated by Tech ;D
The best things in life are free.

Offline ti.colmaster

  • Newbie
  • *
  • Posts: 6
    • Personal Message (Offline)
Re: Avast está bloqueando meu Site
« Reply #3 on: January 04, 2011, 11:59:13 AM »
Obrigado pela ajuda.
Eu apaguei o arquivo mas não funcionou, continua com o mesmo problema.
Então eu voltei o arquivo.
 
Atenciosamente,
Tiago Feijão

Thanks for the help.
I deleted the file but did not work, continue with the same problem.
So I returned the file.
 
Sincerely,
Tiago Feijão

Offline ti.colmaster

  • Newbie
  • *
  • Posts: 6
    • Personal Message (Offline)
Re: Avast está bloqueando meu Site
« Reply #4 on: January 04, 2011, 12:02:06 PM »
Com qualquer outro antivirus, funciona.
Só não com o Avast!

With any other antivirus, it works.
Just not with Avast!

Offline spg SCOTT

  • Massive Poster
  • ****
  • Posts: 4138
  • Gender: Male
  • There is no magic, only lost physics
    • spg SCOTT
    • Personal Message (Offline)
Re: Avast está bloqueando meu Site
« Reply #5 on: January 04, 2011, 12:04:19 PM »
It is in the network shield list, so that will always block it regardless of the content.

If you remove the file for a while longer, we can see if the site is still detected by the webshield.

avast! is definitely detecting that .js file

Once it is cleaned, you can submit the site for removal from the network shield block list.
“There is a computer disease that anybody who works with computers knows about. It's a very serious disease and it interferes completely with the work. The trouble with computers is that you 'play' with them!”Richard Feynman

Offline ti.colmaster

  • Newbie
  • *
  • Posts: 6
    • Personal Message (Offline)
Re: Avast está bloqueando meu Site
« Reply #6 on: January 04, 2011, 12:51:09 PM »
Não aparece essa mensagem pra mim, só aparece assim:

This message does not appear for me, just looks like this:


Offline ti.colmaster

  • Newbie
  • *
  • Posts: 6
    • Personal Message (Offline)
Re: Avast está bloqueando meu Site
« Reply #7 on: January 04, 2011, 12:54:20 PM »
Não aparece essa mensagem pra mim, só aparece assim:

This message does not appear for me, just looks like this:


Offline spg SCOTT

  • Massive Poster
  • ****
  • Posts: 4138
  • Gender: Male
  • There is no magic, only lost physics
    • spg SCOTT
    • Personal Message (Offline)
Re: Avast está bloqueando meu Site
« Reply #8 on: January 04, 2011, 01:13:23 PM »
That is the network shield (Módulo Rede?)

I disabled this to get the alert (NOT recommended)
“There is a computer disease that anybody who works with computers knows about. It's a very serious disease and it interferes completely with the work. The trouble with computers is that you 'play' with them!”Richard Feynman

Offline alenka

  • avast! team
  • Jr. Member
  • *
  • Posts: 39
    • Personal Message (Offline)
Re: Avast está bloqueando meu Site
« Reply #9 on: January 04, 2011, 01:16:39 PM »
Hello,

the reason your site was blocked is this file hXXp://colmaster.com.br/rede/pt-BR.pac which is malicious and is still there - and will be still blocked by Avast. But I changed it so that rest of your site will be accessible (will be fixed in the next VPS). Please delete the file and try to find out how it got there because this situation may occur again in the future (maybe your password has been stolen?).

Alena Varkockova

Offline spg SCOTT

  • Massive Poster
  • ****
  • Posts: 4138
  • Gender: Male
  • There is no magic, only lost physics
    • spg SCOTT
    • Personal Message (Offline)
Re: Avast está bloqueando meu Site
« Reply #10 on: January 04, 2011, 01:27:39 PM »
Hello,

the reason your site was blocked is this file hXXp://colmaster.com.br/rede/pt-BR.pac which is malicious and is still there - and will be still blocked by Avast. But I changed it so that rest of your site will be accessible (will be fixed in the next VPS). Please delete the file and try to find out how it got there because this situation may occur again in the future (maybe your password has been stolen?).

Alena Varkockova

Thanks for this, but what about the other js file that causes an alert?
“There is a computer disease that anybody who works with computers knows about. It's a very serious disease and it interferes completely with the work. The trouble with computers is that you 'play' with them!”Richard Feynman

Offline ti.colmaster

  • Newbie
  • *
  • Posts: 6
    • Personal Message (Offline)
Re: Avast está bloqueando meu Site
« Reply #11 on: January 04, 2011, 06:15:19 PM »
Thanks Alena, for this help.
I will see with the hosting the solution and scan in the site.

Sincerely,

Tiago Feijão

Offline dwpetter

  • Newbie
  • *
  • Posts: 1
    • Personal Message (Offline)
Re: Avast está bloqueando meu Site
« Reply #12 on: February 22, 2011, 05:17:32 PM »
O mesmo ocorre comigo no www.biersite.com.br, como proceder?
Já realizei o download de todo o site, passei o avast e não encontrou nenhuma ameaça!
Só o avast bloqueia o acesso, com demais anti-vírus o problema não ocorre.

Offline Sirmer

  • avast! team
  • Sr. Member
  • *
  • Posts: 213
    • Personal Message (Offline)
Re: Avast está bloqueando meu Site
« Reply #13 on: February 22, 2011, 08:19:51 PM »
dwpetter:
problem was solved and it will be unblock in VPS 110223-0. Problem was with this hxxp://www.biersite.com.br/images_eventos/facebook-pic000934519.exe
This site was probably hacked.
« Last Edit: February 22, 2011, 08:34:52 PM by Milos »

Offline alexandre.infoshop

  • Newbie
  • *
  • Posts: 16
    • Personal Message (Offline)
Re: Avast está bloqueando meu Site
« Reply #14 on: March 06, 2011, 01:03:50 PM »
Pessoal por favor me ajudem!!!
Não sei mais o que fazer, o avast esta detectando meu site como ameaça já removi todos os scripts e o erro continua acontecendo.

O que devo fazer para solucionar o problema?


Alexandre
alexandresgoncalves@hotmail.com


--------------------------------


Staff please help me!
I do not know what else to do, avast detecting this threat to my site already removed all scripts and the error keeps happening.

What should I do to solve the problem?


Alexandre
alexandresgoncalves@hotmail.com

 

Google Chrome

AVAST recommends using the FREE Google Chrome™ browser.

Download Google Chrome Now