Avast WEBforum

Other => Viruses and worms => Topic started by: yarok on April 26, 2013, 10:41:06 PM

Title: Lycos Tripod ALERT
Post by: yarok on April 26, 2013, 10:41:06 PM

Ever since Wednesday, all FREE Tripod pages are blocked with a Bad URL alert (Trojan 32 gen {gzip}).

Example:

hxxp://malignantselflove.tripod.com (substitute tt for xx in hxxp)

Pages hosted by Tripod under a PAID hosting plan do not trigger this alert.

Example:

hxxp://www.narcissistic-abuse.com (actually: hxxp://samvak.tripod.com )

Can't take a screen shot as Avast won't let me through.

Is this a FP (false positive)?

Yarok

Title: Re: Lycos Tripod ALERT
Post by: polonus on April 26, 2013, 11:21:41 PM

Hi yarok,

Make those links non-click-through (hxtp etc.) else they could be taken for content spam,
for those two links can be visited normally without getting an avast! alert,

polonus

Title: Re: Lycos Tripod ALERT
Post by: Pondus on April 26, 2013, 11:21:59 PM

if you think this is wrong, report it here   http://www.avast.com/en-no/contact-form.php

Title: Re: Lycos Tripod ALERT
Post by: yarok on April 27, 2013, 01:15:16 AM

Thanks, Pondus.

Used the form. Don't know if it's wrong. That's why I asked whether this was a FP.

Y.

Title: Re: Lycos Tripod ALERT
Post by: armadillo69 on April 28, 2013, 07:56:55 PM

Hi, I have the same problem. I have two websites with a URL ending ".tripod.com". Avast has been blocking access to these sites since Wednesday.

I have googled other websites hosted by Tripod, and almost all of them are inaccessible on computers running Avast antivirus. Other antivirus programs report that there are no malware threats on those sites.

Armadillo

Title: Re: Lycos Tripod ALERT
Post by: Pondus on April 28, 2013, 08:00:46 PM

Quote from: armadillo69 on April 28, 2013, 07:56:55 PM

Hi, I have the same problem. I have two websites with a URL ending ".tripod.com". Avast has been blocking access to these sites since Wednesday.

I have googled other websites hosted by Tripod, and almost all of them are inaccessible on computers running Avast antivirus. Other antivirus programs report that there are no malware threats on those sites.

Armadillo

what are the URLs

Title: Re: Lycos Tripod ALERT
Post by: armadillo69 on April 28, 2013, 08:03:08 PM

h**p://internetradio.tripod.com and h**p://radiomiamigo.tripod.com

Title: Re: Lycos Tripod ALERT
Post by: Pondus on April 28, 2013, 08:08:34 PM

quttera    http://quttera.com/detailed_report/radiomiamigo.tripod.com

quttera    http://quttera.com/detailed_report/internetradio.tripod.com

urlquery   http://urlquery.net/queued.php?id=23080684

urlquery   http://urlquery.net/report.php?id=2215900   see IDS  (ET RBN Known Malvertiser IP (4)) 

Title: Re: Lycos Tripod ALERT
Post by: polonus on April 28, 2013, 08:18:04 PM

The first one is alerted by avast! Webshield as infected with VBS:Malware-gen, so do not visit  All in one Keylogger report is being flagged ->
-http://webcache.googleusercontent.com/search?client=flock&channel=fds&q=cache:HoJi2PY7wwEJ:http://members.tripod.com/praisegirl/keylogger_report/01_23_2008_21_14_20/Log/Text/01_23_2008_21_14_18w.htm%2Bhttp://www.tripod.lycos.com/%2526m_LO%3D1%2526m_PR%3D26&oe=utf-8&hl=en&ct=clnk |{gzip}

pol

Title: Re: Lycos Tripod ALERT
Post by: armadillo69 on April 28, 2013, 08:35:04 PM

Thanks guys for your help!

I've had a look at the reports at

quttera    http://quttera.com/detailed_report/internetradio.tripod.com
and
urlquery   http://urlquery.net/queued.php?id=23080684

I can't see any issues there, so why should Avast be blocking access to this particular website?

Thanks again,

Armadillo