Avast WEBforum

Non-English Zone => Português => Topic started by: REDACTED on June 06, 2016, 08:11:32 PM

Title: Site bloqueado pelo Avast
Post by: REDACTED on June 06, 2016, 08:11:32 PM
O site de um de meus clientes (https://www.ereganto.com.br/ (https://www.ereganto.com.br/)) está sendo bloqueado pelo Avast, tivemos um problema com scripts maliciosos mas todo já foram removidos, até fiz teste com algumas fermentas, algumas até indicadas em outros tópicos aqui no fórum e nenhuma delas apresenta problemas que justifiquem o bloqueio.
http://zulu.zscaler.com/submission/show/065247c1b64dd5484b59427aeb3685f6-1465234482 (http://zulu.zscaler.com/submission/show/065247c1b64dd5484b59427aeb3685f6-1465234482)
Title: Re: Site bloqueado pelo Avast
Post by: Eddy on June 06, 2016, 08:35:24 PM
URL:<al = IP and/or domain is blocked

Malicious :
https://www.virustotal.com/en/url/547b5d9b0628b2b4e4824639ea02bfa79548e7090120138643cf95fecdb2e708/analysis/1465237339/

Blacklisted / browser difference :
http://www.web-malware-removal.com/website-malware-virus-scanner/?url=www.ereganto.com.br

Blacklisted / bad reputation :
http://www.urlvoid.com/scan/ereganto.com.br/

Outdated software :
https://sitecheck.sucuri.net/results/www.ereganto.com.br

SSL/TLS issues (vulnerable to poodle attack) :
https://www.ssllabs.com/ssltest/analyze.html?d=www.ereganto.com.br

Blakclisted / malicious activity :
http://zulu.zscaler.com/submission/show/4fcd44886a441198c8b8121604121690-1465237530
Title: Re: Site bloqueado pelo Avast
Post by: REDACTED on June 09, 2016, 05:06:53 PM
O Avast também está bloqueando meus acessos:

https://portal.redeclaretiano.edu.br/login
http://www.fortuneguitarshop.com.br/

Antes conseguia acessar pelo SafeZone Browser, agora nem por ele é possível.

Já configurei o Firewall do Windows, não tenho nenhum outro programa de segurança instalado além do Avast.
Title: Re: Site bloqueado pelo Avast
Post by: jefferson sant on June 15, 2016, 04:43:19 AM
Quote from: Caio Ars Nova on June 09, 2016, 05:06:53 PM
O Avast também está bloqueando meus acessos:

https://portal.redeclaretiano.edu.br/login
http://www.fortuneguitarshop.com.br/

Boa noite.
Eu não vejo o bloqueio e nenhum dos sites, isso acontece apenas ao logar com as credenciais de acesso email e senha.

Quote from: Angelo56 on June 06, 2016, 08:11:32 PM
The site of one of my clients  (https://www.ereganto.com.br/ (http://hxxps://www.ereganto.com.br/)) is blocked by Avast we had a problem with malicious but all have been removed scripts until I test with some tools, some even mentioned in other threads here in the forum and none of them has problems justifying block.

http://zulu.zscaler.com/submission/show/065247c1b64dd5484b59427aeb3685f6-1465234482 (http://zulu.zscaler.com/submission/show/065247c1b64dd5484b59427aeb3685f6-1465234482)


Eu vou relatar para a equipe Avast

Reported to vírus Analyst

Title: Re: Site bloqueado pelo Avast
Post by: HonzaZ on June 15, 2016, 06:18:22 PM
Hi,
We do not block access to either of the sites:
https://portal.redeclaretiano.edu.br/login
http://www.fortuneguitarshop.com.br/
Just tested with Avast ON without any popup.
Title: Re: Site bloqueado pelo Avast
Post by: jefferson sant on June 23, 2016, 04:15:22 AM
(http://i.imgur.com/ikQxQOq.png)

Reported again to the Analyst
Title: Re: Site bloqueado pelo Avast
Post by: HonzaZ on June 27, 2016, 10:13:52 AM
And is the redirection intentional?
ereganto was blocked due to this: http://blog.dynamoo.com/2016/05/malware-spam-please-find-attached-file.html
Title: Re: Site bloqueado pelo Avast
Post by: REDACTED on June 27, 2016, 02:39:32 PM
HonzaZ, if you are talking about the redirection from http://ereganto.com.br/4bxi09t to https://www.ereganto.com.br/, yes, is intentional, any http URL is redirect to a https URL.
Title: Re: Site bloqueado pelo Avast
Post by: HonzaZ on June 27, 2016, 04:08:45 PM
I am sorry, I got a little confused. There were two different reports here...

Then my question is: why was ereganto.com.br/4bxi09t there? Did you clean up the infection? What precautions did you take so it doesn't happen in the future?
Title: Re: Site bloqueado pelo Avast
Post by: REDACTED on June 27, 2016, 04:13:42 PM
The infection has been cleared , and the system has been updated to prevent new issues.
Title: Re: Site bloqueado pelo Avast
Post by: HonzaZ on June 27, 2016, 04:25:39 PM
Nice to hear that, I am unblocking ereganto.com.br now ;)
Title: Re: Site bloqueado pelo Avast
Post by: jefferson sant on June 27, 2016, 10:53:14 PM
Quote from: HonzaZ on June 27, 2016, 04:25:39 PM
Nice to hear that, I am unblocking ereganto.com.br now ;)
Thanks HonzaZ  : )

Angelo56 desculpe pelo atraso na resolução do problema
A URL foi desbloqueado.

Title: Re: Site bloqueado pelo Avast
Post by: REDACTED on July 08, 2016, 03:53:05 AM
Pessoal, estou tendo o mesmo problema com o site do meu cliente https://www.casaesua.com.br/ ... tive problemas com pishing.. mas já resolvemos tudo no server.. agora os pcs que tem avast estão bloqueando.. como faço para desbloquear o site?

dês de já agradeço!
Title: Re: Site bloqueado pelo Avast
Post by: HonzaZ on July 08, 2016, 09:30:56 AM
Router CSRF attack coming from hxxp://casaesua.com[.]br/system/config/wpflx.php as close as 10 hours ago - did you really remove the infection already?
Title: Re: Site bloqueado pelo Avast
Post by: REDACTED on July 08, 2016, 08:09:02 PM
Yes! this directory is empty, from the moment I wrote this post until now. take a look my print from the filemanager, in this directory.

(http://i.imgur.com/170kosW.png)
Title: Re: Site bloqueado pelo Avast
Post by: HonzaZ on July 08, 2016, 08:18:23 PM
Nice to hear that ;) I have removed the site from our blacklist!
Title: Re: Site bloqueado pelo Avast
Post by: REDACTED on July 09, 2016, 12:35:51 AM
thanks!