Avast WEBforum

Business Products => Avast Business => Topic started by: naupai on July 03, 2019, 06:14:17 PM

Title: Connection to bad sites not blocked
Post by: naupai on July 03, 2019, 06:14:17 PM
Hi Avast,

Recently I'm picking up connection attempt to r.sastts.com, rokuq.com and nusojog.com from a few of our workstation.
This addresses has been flagged as Botnet connection attempt by our DNS service provider.

I have ran Avast SmartScan and Full-scan on the workstation that is making the connection but Avast pickup nothing.
I suspected that this connection is made using js script while user are browsing using Chr0m3 browser.

Any definition update guys?
Title: Re: Connection to bad sites not blocked
Post by: mickey.b on July 09, 2019, 06:38:33 PM
Hi Avast,
Recently I'm picking up connection attempt to r.sastts.com, rokuq.com and nusojog.com from a few of our workstation.
This addresses has been flagged as Botnet connection attempt by our DNS service provider.
I have ran Avast SmartScan and Full-scan on the workstation that is making the connection but Avast pickup nothing.
I suspected that this connection is made using js script while user are browsing using Chr0m3 browser.
Any definition update guys?

Sorry we haven't responded sooner. Did Avast ever detect this? If not, we'd need whatever that it is sending out these requests to add to our definitions (files, software, etc.)
Have you looked for any suspicious Google Chrome extensions?