Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Spiritual2016 on January 06, 2018, 04:57:33 AM

Title: xml.plaimedia.com Aborted
Post by: Spiritual2016 on January 06, 2018, 04:57:33 AM

It happened again that I was on a Yahoo Answer page and an Avast message stated that xml.plaimedia.com was safely aborted because it was infected with html:RedirME-Inf(Tr).

I went back to the same Yahoo Answers page but there was no issue and I was previously there would not be an issue because of a different server or different ad.


It is not listed in the Virus Vault and no issues are detected when an AVG full virus scan and MalwareBytes scan were performed.

Q1. Was it safe to go back to that website or is it not recommended once the message first appears on the webpage?

Q2. I should have searched for 'What is xml.plaimedia.com' in Firefox but instead searched for 'xml.plaimedia.com' and it took me to a website with a sign-in page and a greyed-out background so I closed the window.

Q3. Is xml.plaimedia.com a website?

Title: Re: xml.plaimedia.com Aborted
Post by: Pondus on January 07, 2018, 10:42:13 PM

Q3. Yes  and avast say it containe a redirect ( html:RedirME-Inf(Tr) ) seems to go to a loan website

"Same Day Loans For Twelve Months - Speedy Determination Loans"

Title: Re: xml.plaimedia.com Aborted
Post by: Spiritual2016 on January 07, 2018, 11:12:40 PM

Thanks.

Title: Re: xml.plaimedia.com Aborted
Post by: HonzaZ on January 10, 2018, 10:23:36 AM

A1: It is safe, Avast/AVG got your back 8)
A2: I too get a sign-in page, but Avast didn't complain about that. Perhaps it needs a specific referer to redirect it further? (as observed by Pondus)
A3: Yup, it is a website :)

Title: Re: xml.plaimedia.com Aborted
Post by: Spiritual2016 on January 16, 2018, 09:38:43 PM

HonzaZ:


To be clear, even though there was a warning message displayed on this website, is it safe to go back to that website to try again or is it not recommended since the threat is now embedded on that website and the warning message will be displayed each time I visit it?

Title: Re: xml.plaimedia.com Aborted
Post by: HonzaZ on January 17, 2018, 06:23:00 AM

It should be safe. The administrators might remove the threat and in that case Avast will stop complaining.

Title: Re: xml.plaimedia.com Aborted
Post by: Spiritual2016 on January 28, 2018, 09:42:07 PM

HonzaZ:

1. If the admin has not removed that specific threat, is it safe to go back to that website to try again (I am aware that Avast will block the threat each time) or is it not recommended since the threat is now embedded on that website and the warning message will be displayed each time I visit it?

2. Since the website is the Yahoo Community Answers, would the threat only be on that specific Answers page or the website itself?

Title: Re: xml.plaimedia.com Aborted
Post by: HonzaZ on January 29, 2018, 06:40:01 AM

re 1. Both. It is safe, but it is not recommended.
re 2. I think it is likely that is is only on that specific page.