Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on December 30, 2014, 06:38:54 PM
-
Opened Firefox this morning and the page that opened up was Facebook (along with all of my other tabs). I immediately received a notification from Avast that it had blocked a malware infection from https://54.186.138.97,C:\program files (x86) \mozilla firefox\firefox.exe. Can anyone tell me what this is all about ? I've seen this at least once before very recently.Possobly 2-3 other times.I can't say how many times for certain because I don't shut my browser down very often and it blocks it and I just don't worry about it.But,it's getting annoying.apcgvlu
-
Guessing ads from a blacklisted url/ip
-
Please break the link to what is a suspect site to avoid accidental exposure - change the https to hXXps.
Do you have a screenshot of the avast alert, if so please attach it to your next reply.
If you haven't had any other avast popup since then, right click on the avast tray icon and select 'Show last popup message.'
Though a reverse DNS fir this IP comes back as compute.amazonaws.com see http://www.ip-adress.com/ip_tracer/54.186.138.97 (http://www.ip-adress.com/ip_tracer/54.186.138.97). So I wonder why the alert was triggered - and why I asked for the screenshot.
-
IP history https://www.virustotal.com/en/ip-address/54.186.138.97/information/
-
Yep history - avast needs to investigate the apparent IP block.
-
David.....please speak moron ! I'm not exactly a tech genius.I do not have a screenshot.A typed out the alert in notepad EXACTLY as it was was written out in the message and copied & pates it in my forum post.
Now,I've got another another one while visiting a Twitter page !!!
http://48989578.special-notice2992.com/c.php?aid=259&lid=8844
And,honestly,David,I don't know what you mean by " break the link to what is a suspect site to avoid accidental exposure - change the https to hXXps".????????? hXXps ???????? Hmmmmmm.Okie-dokiee.
-
When posting suspect links pleas break them so they aren't active to avoid accidental exposure for others - changing the http to hXXp in the urls you posted breaks the link, people can't accidentally click on the suspect link.
This link however is entirely different to your original one and should perhaps be kept separate. But weird links from twitter doesn't surprise me in the least (I don't use any social networking sites, so can't really speak on it).
As far as not being able to get a screenshot - that would most likely have also given a URL:MAL as the reason for blocking the IP address.
It is possible that this is because of the history of that IP address (link in Pondus's post), previously it has been used/owned by many other domains (not just the amazonaws.com), these other domains and their random names are highly suspect. These may well have been malicious and this is probably why the IP address is blocked,
-
Ahhhhh.....okay ! I think I understand what you mean now.I'm very sorry about that.And,I really don't use Twitter.But,Marty Balin "followed" me.How could I say no ? Ha,ha.(He's one of the old lead vocalists for (The old) Jefferson Airplane.I must commend you on your "non-use" of social media ! I use FB just to kill time.But,I pretty much despise it.Hey.....thank you all for your help.I start seeing stuff like this happening (often) and it begins to make me worry a bit.It makes me think that maybe somethings wrong with Avast and maybe Avast itself has become infected.THAT scares me ! He,he.
-
If/when you think this is something in your computer (it happens) then free check/removal help is done in viruses and worms forum section
See instructions here https://forum.avast.com/index.php?topic=53253.0
Logs needed to help you are Malwarebytes and Farbar Recovery Scan Tool
-
Detection was turned off. sorry for inconvenience
-
Detection was turned off. sorry for inconvenience
Thanks for the prompt response.
-
Detection was turned off. sorry for inconvenience
(http://s29.postimg.org/dm3t9m37r/avast_do_something_please.jpg)
I'm still getting the pop-up, like many other polish avast users.
-
I don't know if the block (edit, being cleared) is effective yet or not - ordinarily this would come through a virus definitions update (VPS) - so it could take a little time for that to happen.
Whilst it could come through in a streaming update, which is more frequent.
Check that you have the latest VPS update, if so it may be a little longer.
-
Today also saw this just after opening Firefox
it's the 2nd time i see it (only when i opened firefox, not while surfing a website)
-
This early morning with the new update the malware pop up disappeared. Many thanks to AVAST team members for the quick intervention, despite the "end of the year" critical period. :)
-
Today also saw this just after opening Firefox
it's the 2nd time i see it (only when i opened firefox, not while surfing a website)
I enabled streaming updates and now everything is ok.
-
Today also saw this just after opening Firefox
it's the 2nd time i see it (only when i opened firefox, not while surfing a website)
I enabled streaming updates and now everything is ok.
Streaming updates are enabled by default. :)
They ensure that you are always protected against the latest discovered infections.
Streaming updates are also used to update many other things in the background.
-
Today also saw this just after opening Firefox
it's the 2nd time i see it (only when i opened firefox, not while surfing a website)
I enabled streaming updates and now everything is ok.
Streaming updates are enabled by default. :)
They ensure that you are always protected against the latest discovered infections.
Streaming updates are also used to update many other things in the background.
If for any reason the user disables auto updates then streaming updates are also disabled.
-
Streaming updates are enabled by default. :)
They ensure that you are always protected against the latest discovered infections.
Streaming updates are also used to update many other things in the background.
I believe it is as you say cause i can't find that option on Avast 2015
Edit: never mind, sily me just didn't see well :P