Avast WEBforum

Other => Viruses and worms => Topic started by: spudd57 on January 05, 2023, 05:39:03 AM

Title: survey-smiles.com blocked
Post by: spudd57 on January 05, 2023, 05:39:03 AM
Hi
I keep getting an alert stating "survey-smiles.com blocked", every time I open a browser Chrome or firefox.
Is there anything to worry about.
or, do I need to remedy this.
Thanks
Title: Re: survey-smiles.com blocked
Post by: DavidR on January 05, 2023, 11:44:39 AM
I take it that you aren't trying to connect to the site  ?

If not I would start by clearing your browser cache.

Edit: typo.
Title: Re: survey-smiles.com blocked
Post by: spudd57 on January 05, 2023, 12:20:52 PM
Hi
Thanks.
Your right, wasn't trying to go to that site.
Don't recall ever going to that site.

here is a screen shot of what I'm getting.
Rgds.
Title: Re: survey-smiles.com blocked
Post by: bob3160 on January 05, 2023, 01:36:03 PM
(https://d1ka0itfguscri.cloudfront.net/Lh/2023/01/05/12/34/c0Vhl4VwlGr/preview.jpg)
Clear your browsing history and restart the browser.
Title: Re: survey-smiles.com blocked
Post by: DannyBR on January 05, 2023, 02:31:37 PM
I have the same issue. Cleared the browser cash, deleted all the recently installed apps, programs and Chrome extensions, reset policies and still this survey-smiles bs appears. Any other suggestions, folks?
Title: Re: survey-smiles.com blocked
Post by: Pondus on January 05, 2023, 05:19:21 PM
Follow instructions in Malwarebytes forum and experts there will assist you

https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/

Title: Re: survey-smiles.com blocked
Post by: spudd57 on January 05, 2023, 11:19:07 PM
Thanks,
but clear as mud.
Looking at doing it manually and why can't avast remove it?
Title: Re: survey-smiles.com blocked
Post by: Pondus on January 06, 2023, 12:12:14 AM
Quote
Looking at doing it manually and why can't avast remove it?
1. no program have 100% detection
2. maybe the program/process that try to Connect to that url is not malicious ?
3. is avast PUP detection ON ?



Title: Re: survey-smiles.com blocked
Post by: spudd57 on January 06, 2023, 12:47:11 AM
Hi,
Yes AVAST PREMIUM SECURITY, everything on.
Avast is detecting it and blocking but it doesn't do anything to stop it. rates it "URL:scam".
Have performed full scans, avast full scan; malware bites; Iobit malware fighter; defender; now trying spyware hunter... after that I'll do an avast bootime scan.
seems to be related to both my browsers Chrome and firefox.

Can't find anything in the registry either.

can't find anything on line search that stops the detection.
Regards.
Title: Re: survey-smiles.com blocked
Post by: bob3160 on January 06, 2023, 01:02:13 AM
Have you reported this as a possible false positive to Avast?
Report Suspicious File or URL:  https://www.avast.com/false-positive-file-form.php
Title: Re: survey-smiles.com blocked
Post by: spudd57 on January 06, 2023, 01:37:47 AM
Hi
No, whilst doing research on survey-smiles; it's something I don't want polluting my PC.
It doesn't give me the option to report as a false negative, as other alerts do.
It's only been happening as of about 2 days ago.
I reported it as a suspected malicious file.... let's see what happens.
thanks
Title: Re: survey-smiles.com blocked
Post by: JDMerc on January 06, 2023, 09:14:53 AM
Hello! I'm having this exact same problem as well. I also did several full system scans as well as a boot scan and none of them fixed the problem. AVAST Premium is blocking it but it's not finding the source  :-\
Title: Re: survey-smiles.com blocked
Post by: bob3160 on January 06, 2023, 09:55:10 AM
Hello! I'm having this exact same problem as well. I also did several full system scans as well as a boot scan and none of them fixed the problem. AVAST Premium is blocking it but it's not finding the source  :-\
Did You report it?
Have you reported this as a possible false positive to Avast?
Report Suspicious File or URL:  https://www.avast.com/false-positive-file-form.php (https://www.avast.com/false-positive-file-form.php)
Title: Re: survey-smiles.com blocked
Post by: spudd57 on January 07, 2023, 12:47:33 AM
IT'S NOT A FALSE POSITIVE.

I sent a false positive  report to Avast,; still waiting for a reply.

So, I reported to AVG as well, as I understand they are both owened by the same entity.
AVG replied that survry-smile.com is infact infected.

So;  it's a good thing avast keeps blocking it.

Regards.
Title: Re: survey-smiles.com blocked
Post by: bob3160 on January 08, 2023, 02:44:10 PM
IT'S NOT A FALSE POSITIVE.

I sent a false positive  report to Avast,; still waiting for a reply.

So, I reported to AVG as well, as I understand they are both owened by the same entity.
AVG replied that survry-smile.com is infact infected.

So;  it's a good thing avast keeps blocking it.

Regards.
Please note that I didn't say it was a false positive.
Reporting to Avast forces them to take another look at the detection to either confirm the infection
or correct a false positive report.
Title: Re: survey-smiles.com blocked
Post by: pacalo on January 08, 2023, 05:45:08 PM
The exact same problem is happening to me. Started about a week ago. I´ll keep looking forward here for a solution!
Title: Re: survey-smiles.com blocked
Post by: bob3160 on January 08, 2023, 06:10:53 PM
The exact same problem is happening to me. Started about a week ago. I´ll keep looking forward here for a solution!
https://forum.avast.com/index.php?topic=322263.msg1698213#msg1698213
Title: Re: survey-smiles.com blocked
Post by: NylePudding on January 08, 2023, 08:10:22 PM
Hi
I keep getting an alert stating "survey-smiles.com blocked", every time I open a browser Chrome or firefox.
Is there anything to worry about.
or, do I need to remedy this.
Thanks

Hello, just thought I would chime in and say I also have this problem. Haven't found a solution yet but if I discover anything I'll report back here.
Title: Re: survey-smiles.com blocked
Post by: spudd57 on January 09, 2023, 04:12:54 AM
Hi Bob,
The captial letters were only intended as a Head Line for my post.
the report merely points to an answer from AVG.
Incidently, still haven't received any reply from AVAST with whom I have my subscription..

Still getting the alerts about survey smiles trying to connect to my browsers automatically.

Even when using bank mode in the avast secure browser.
 regards,
Title: Re: survey-smiles.com blocked
Post by: sagaidaalexandr on January 16, 2023, 07:59:33 PM
I have also this problem.
And I´ll keep looking forward here for a solution!

P.S. And I known one person, in my work, who also have problem with  survey-smiles.com, this person also use Avast.

Title: Re: survey-smiles.com blocked
Post by: polonus on January 17, 2023, 10:54:16 AM
L.S.

9 vendors now flag it now as being malicious, see: https://www.virustotal.com/gui/url/3a15526b6e2391894cebdf79cc481155db6adc0f1c9922418367807398b65d27

It is Bodis-1/2 abuse (error connection refused), various redirections.

Also see: https://www.virustotal.com/gui/url/3a15526b6e2391894cebdf79cc481155db6adc0f1c9922418367807398b65d27/community (various reports)

I get a 6   -survey-smiles dot com   SOA   -ns1.bodis.com   -185.85.196.36   Admin: -dnsadmin.bodis.com *, Default TTL: 3600, Expire: 1209600, Refresh: 10800, Retry: 3600, Serial: 2017062202   Answer   10.800   * abuse should be reported to Cloudflare, error connection refused.  (source Nir Sofer's DNS DataView)

Also see: https://sitereport.netcraft.com/?url=http://survey-smiles.com

polonus (volunteer 3rd party cold reconnaissance website security analyst and website error-hunter)
Title: Re: survey-smiles.com blocked
Post by: spudd57 on January 17, 2023, 11:45:06 PM
POSSIBLE SOLUTION??
24 hours ago, after trying every possible solution offered online, I tried this in my firefox and haven't recieved an alert since.

Settings > Pivacy & security > Cookies and Site Data > Manage Data.
In the search box I enered "survey-smiles.com" found it and removed it, (and it's Cookie).

Fingers crossed this is a solution.
I gave up on avast support too many hoops to go through and no real help. Created a case and the avast support tool kept failing to generate a report.

Good luck everyone.
Title: Re: survey-smiles.com blocked
Post by: DavidR on January 18, 2023, 01:45:22 AM
This is pretty much what I suggested in my first post.

<snip>
If not I would start by clearing your browser cache.
<snip>
Title: Re: survey-smiles.com blocked
Post by: spudd57 on January 18, 2023, 02:21:05 AM
I cleared all the cache and data in the first place... didn't work then, because survey-smiles didn't show up at all in the list.
completely uninstalled Firefox a few days ago, while doing all the other methods.
Yesterday went through thr site list again, after using all the other avast tools. Alert still coming up.
Checkd the data list and there it was.
best I can guess is that the cookie attached to something else the first instance; and then droped in as Survey-smiles after the reinstall.????
It's only been 24 hrs so let's see what happens.
I have never visited survey- smiles, so it's come in on something else?

Cheers.
Title: Re: survey-smiles.com blocked
Post by: DavidR on January 18, 2023, 03:06:21 AM
Some sites have links to other sites, which may have had a cookie that may have 3rd party cookies.

However, this is a bit strange because of Firefox's supposed isolation of cross site cookies in the Enhanced Tracking Protection.

You could also opt to "Delete cookies and site data when Firefox is closed", however this may be a bit of a pain.
Title: Re: survey-smiles.com blocked
Post by: spudd57 on January 18, 2023, 03:25:50 AM
It was happening with chrome aswell. I deleted chrome rarely used it anyway.
I have been using Avast clean and antitrack, since I installed them 2 days ago. Don't know ith they help.

Title: Re: survey-smiles.com blocked
Post by: DavidR on January 18, 2023, 12:51:18 PM
I don't use Avast Clean or AntiTrack, so I can't comment on that. 

However, I would have thought you would get a different warning if they intervened.