Avast WEBforum

Other => Viruses and worms => Topic started by: bibo35 on May 22, 2013, 06:50:41 PM

Title: Website blocked and a general question
Post by: bibo35 on May 22, 2013, 06:50:41 PM

Hello

I had recently visited this website ionnor <dot> com  to get contact details and thankfully...
Avast blocked this website due to some URL:Mal2 virus

In my Firefox browser i have latest NoScript installed with everything blocked like iframes, redirects, scripts. even on white listed sites. Also i do not have java plugin for Firefox and flash is normally blocked until i manually allow it.

So i want to ask after all these measure can still an infected website inject virus into my computer? if yes then how?

Title: Re: Website blocked and a general question
Post by: Pondus on May 22, 2013, 06:56:30 PM

Quote

So i want to ask after all these measure can still an infected website inject virus into my computer? if yes then how?

as safe as you can be, nothing is 100%  ..... the badguys always find a security hole.... if it is there

urlvoid   http://www.urlvoid.com/scan/ionnor.com/

sucuri.  http://sitecheck.sucuri.net/results/ionnor.com

virustotal.  https://www.virustotal.com/nb/url/00a8b78ac6571cf907d4bd999d026f111236bd5a6819dffe4fd248605207d9db/analysis/1369241950/

Title: Re: Website blocked and a general question
Post by: bibo35 on May 22, 2013, 07:12:46 PM

Thanks for the quick reply

I usually don't visit unknown websites but this website is definitely an infected one.

Title: Re: Website blocked and a general question
Post by: Pondus on May 22, 2013, 07:21:24 PM

the website seems to be down..

click picture in top right corner.   http://urlquery.net/report.php?id=2611831

Title: Re: Website blocked and a general question
Post by: bibo35 on May 22, 2013, 07:25:27 PM

Thanks for the reply

So this means that Avast blocked the website because it is blacklisted by google or it blocked because it has actually saw the virus

Title: Re: Website blocked and a general question
Post by: Pondus on May 22, 2013, 07:35:24 PM

when avast detect malware, it will give the malware name in the warning popup
URL:mal means the url is on a block list

Title: Re: Website blocked and a general question
Post by: DavidR on May 22, 2013, 07:40:33 PM

Quote from: bibo35 on May 22, 2013, 07:25:27 PM

Thanks for the reply

So this means that Avast blocked the website because it is blacklisted by google or it blocked because it has actually saw the virus

No avast blocked it because of its own information.

The web shield is very hot on infected/hacked sites (a high proportion of infections come from them) it scans content, be that malicious content or signs of hacking, which would generally be trying to import data/run a script from another site. Whilst NoScript should prevent that script from running the web shield if is detects the malicious script alerts on it without it having to be run.

The avast Network Shield is also involved as it checks all connections to a site including links to external sites against its malicious sites list.