Avast WEBforum

Other => Viruses and worms => Topic started by: אביב on July 05, 2022, 08:49:55 PM

Title: Help | Skegnessasc.org Virus
Post by: אביב on July 05, 2022, 08:49:55 PM
Hello. yesterday i have installed a old game from a mobile storage on my PC. after that i start to got pop-up messages from avast evrey few minutes. "Threat blocked skegnessasc.org  because it was infected with URL:Blacklist"
i deleted the game as well already.
i have done smart/and full scan with 0 virus result. (i dont know where to find the log to post it- will be happy for help)
i have downloaded a Malwarebytes and this not find nothing also.
i have founded some posted from this Forum from 2014-2017 but i didnt found somthing that can help me solve it.

please help me!
(https://www.linkpicture.com/q/problem.png) (https://www.linkpicture.com/view.php?img=LPic62c48b54720fd536086884)
Title: Re: Help | Skegnessasc.org Virus
Post by: DavidR on July 05, 2022, 09:04:20 PM
Nothing found here - https://www.virustotal.com/gui/url/d8f6b6603e6a9c879afc4d9e914f3fbec5745c21bdd79bb8960607ebc2b07c8c?nocache=1

Medium Security Risk here - https://sitecheck.sucuri.net/results/skegnessasc.org

Reporting a Possible False Positive File or Website - https://www.avast.com/false-positive-file-form.php (https://www.avast.com/false-positive-file-form.php).
You should get a response in a day or two.
Title: Re: Help | Skegnessasc.org Virus
Post by: אביב on July 05, 2022, 09:10:08 PM
thx for answering . what file or website link i have to put inside the report link? i dont know.
Title: Re: Help | Skegnessasc.org Virus
Post by: DavidR on July 05, 2022, 09:21:15 PM
The website link that avast is alerting on, your image and comment:

"Threat blocked skegnessasc.org  because it was infected with URL:Blacklist"
Title: Re: Help | Skegnessasc.org Virus
Post by: אביב on July 05, 2022, 09:34:17 PM
allright i have done it. im just wondering.. this is file in my pc that hiding and make this happends? or just bug in the anti virus that continue to pop it up? just for make sure u got me. im not trying to get inside this website..im even dont know what is this website. the avast pop-up message just jump alone.
Title: Re: Help | Skegnessasc.org Virus
Post by: DavidR on July 06, 2022, 12:42:53 AM
What this website is/was Skegness ASC (Amateur Swimming Club)
:Skegness is a seaside town and civil parish in the East Lindsey District of Lincolnshire, England.
It is possible that some time ago this site was hacked, but how/why you are getting redirected there is beyond me.  I don't even know if the site is still active.

That said - If it happens again when the Avast Alert opens, use the See details option and it shows what is trying to reach it. 

Most likely your browser (?) and not a bug in the AV as it has no reason to visit said site. 

It could be an add-on in your browser that is trying to redirect to the site.  Have you recently had any new browser add-ons or updated to existing browser add-ons ?

A google search for returns many hits, I did find this but it too is very old (so I wouldn't put much store in it being current, so I wouldn't recommend downloading anything):
https://tipsforoptimalbrowsing.blogspot.com/2015/09/removal-of-skegnessascorg-pop-up.html
Title: Re: Help | Skegnessasc.org Virus
Post by: אביב on July 06, 2022, 02:23:17 AM
no sir. i didnt added no addons to my browser . the only thing i have done is to install an old Sims 1 complete collection . but i didnt download it. its was saved inside old toshiba storage. shortly after i finish to install it i got error from the install that said
"windows not find restorefunction.exe" and then Avast come inside the game and pop up non stop the massage we see.
the sad thing is that i have scan the folder of sims and of the storage him self with avast to find any virus before i even installed the game , and i did it because my pc is new and i wont take risk. and its didnt found any virus or issue.
this is the pic with "see more" option.
Title: Re: Help | Skegnessasc.org Virus
Post by: DavidR on July 06, 2022, 03:21:57 AM
Something on your system is misusing svchost.exe to make this connection. 

Whilst it isn't unusual for svchost.exe to connect it is normally in regard to system connections like windows updates etc.

Title: Re: Help | Skegnessasc.org Virus
Post by: אביב on July 06, 2022, 04:31:12 AM
so now i cant also uninstall the game! its gave catastrophic failure with saying that some file are missing ..only after install revo i sucssed to uninstall it.. anyway i just wanna play simple game and now i feel like whole of my pc start to fucked up.
now avast keep pop-up the massage. im already bealive that my pc got a big serius virus. but how the hell i get rid of this?!? i just format my pc not long ago damn just dont tell me i will need to do it again
Title: Re: Help | Skegnessasc.org Virus
Post by: DavidR on July 06, 2022, 12:03:06 PM
Unfortunately, this is likely to require specialist/qualified help to assist in this malware removal. 

There used to be malware removal specialists in this forum who could do this, but the need was so small and infrequent that they moved to other more active sites to keep current. 

The MalwareBytes forum still has active help in this area - https://forums.malwarebytes.com/forum/7-windows-malware-removal-help-support/ - this may be your best first option.

I don't know if you do regular system restore points or backup your system to an external source that you can go back to a point before this game installation that you could restore.  If not then a system format is a last resort, but first try the above malware-removal-help-support link.

I appreciate this is a big issue but, Please modify your language in a forum that has no age limits.
Title: Re: Help | Skegnessasc.org Virus
Post by: אביב on July 06, 2022, 12:18:58 PM
The thing is. that AntiMalwarebytes work with avast but he not say nothing.. its only avast annoying. i dont know what to think laready!? this is virus? this is not virus? if this is virus why avast not find it? why antimalware not find it? why avast keep pop-up?
i will try to go forum of malware but im not bealive that forums really help's... the reason i come here its bacouse i payed money for avast. so i wish avast take responsibilty for them protection of my pc.
Title: Re: Help | Skegnessasc.org Virus
Post by: אביב on July 06, 2022, 12:20:18 PM
"I appreciate this is a big issue but, Please modify your language in a forum that has no age limits."

what is this need to be? did i said something wrong lol?
Title: Re: Help | Skegnessasc.org Virus
Post by: DavidR on July 06, 2022, 12:22:05 PM
"I appreciate this is a big issue but, Please modify your language in a forum that has no age limits."

what is this need to be? did i said something wrong lol?

Swearing 'F' up.
Title: Re: Help | Skegnessasc.org Virus
Post by: אביב on July 06, 2022, 12:59:03 PM
thank you for your patience and your help. do you know how long its will takes untill specialist/qualified help will help me? igot over 100+ pop-ups in one day :[
Title: Re: Help | Skegnessasc.org Virus
Post by: DavidR on July 06, 2022, 02:56:53 PM
That is outside of my control if you are talking about the malwarebytes support forum.

To retain currency the qualified malware removal specialists need to be active, that is why those qualified people go to active support sites.
Title: Re: Help | Skegnessasc.org Virus
Post by: אביב on July 06, 2022, 03:38:24 PM
so here in avast support no one can help me? sory this is what i got from you.
Title: Re: Help | Skegnessasc.org Virus
Post by: rocksteady on July 06, 2022, 03:45:53 PM
Note that DavidR and others are just other users and volunteers on the forum. If you have a paid version of Avast, you should be able to contact Avast Support for help.
Another option may be to seek advice here: https://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-help/
Title: Re: Help | Skegnessasc.org Virus
Post by: polonus on July 06, 2022, 06:43:14 PM
When contacting a qualified malware remover there, pay attention to the fact of there being a misconfigured server file behind that domain website, named: /server_misconfigured.png

polonus
Title: Re: Help | Skegnessasc.org Virus
Post by: אביב on July 07, 2022, 01:55:09 PM
Update*
* im posted my problem in MalwareBytes also and wait for them to try help me.


* i found safe restore point of windows. i go back to 1/7/2022.
and the messages from avast are stoped! so i have done it? because i know that some virus like worm can keep stay in pc even after rsystem restore.
 i did also more scan and all seems to be clean. there is chance that the virus still at my pc and i cant know?

btw its ok for my pc to run with both programs at once? (Malwarebytes + avast +avast internet and all the serie's of avast).
 
i want to say again thanks for all the user here who answer quickly and try helping me. im appriciate it.


***update

Malwarebytes keep show me massage evey few mins that he block some website. but its not show much extra info. this is the same things avast have blocked before evrey 20 mins?
Title: Re: Help | Skegnessasc.org Virus
Post by: DavidR on July 07, 2022, 04:14:21 PM
It is not advised to have two resident antiviruses at the same time, which is why Windows disables Defender when a 3rd party AV is installed (to avoid potential conflict).

It is like two dogs fighting over one bone.  So it looks like MBAM is intercepting it otherwise you would be getting an avast alert.

It does look like the same thing is happening, so you need to wait for a response at malwarebytes forum so a qualified malware removal specialist can advise you.
Title: Re: Help | Skegnessasc.org Virus
Post by: אביב on July 07, 2022, 04:17:21 PM
now im not getting message from both over 2 hrs. i will shut Malwarebytes and see how its keep going.