Avast WEBforum
Other => General Topics => Topic started by: drhayden1 on October 25, 2010, 01:06:12 PM
-
after going to giveawayoftheday.com this am
avast is now doing this???
have gone to that site daily like i know a few of you have....
-
No, at least not in my case..
avast! do not block this site at this point of time.
-
It is blocked here
-
I got the block too. ;)
-
yup i just checked and i got that blocked message too lol
funny thing is i was just there this morning around 4am est
think they were giving away a productivity software that monitors what the user is doing...
not sure what the reasoning behind blocking the site, but either way its nice to see avast do this on occasion just to let us know its working lol
-
Blocked here also as of 7:00 AM Mountain time.
-
No, at least not in my case..
avast! do not block this site at this point of time.
Outdated avast or proxy?
-
Blocked here too! How do I unblock it?? ???
-
Blocked here too! How do I unblock it?? ???
Wait for an update from either the site or avast. because it's not recommended to use a site which is flagged with such script.
but until then, at your own risk, here is manual how to bypass a site from scanning.
-
still blocked here Omid my friend :)
and avast!and everything else is up to date!!
well wait until the smoke clears then doing what you mentioned in post before mine and at your own risk ???
-
Before I updated avast I was able to access Giveaway of the Day. I updated avast before posting this and the site is now blocked.
It might be with the latest definitions.
-
Well it appears that there is a compressed javascript file being loaded with the home page, why that is happening is beyond me, see image extract of the page.
Currently only avast and gdata are detecting this in VT, although that has happened many times before and avast has been correct before, VT Results (http://www.virustotal.com/file-scan/report.html?id=cd77baef3716dc94d12f1a9306eb6d24cb3a02a96ebe0110cc11db1194a70ecb-1288016066).
You could add the domain to the web shield, expert settings, exclusions, but I would NOT recommend this. But report as a possible FP and have it corrected if it is an FP.
Edit: I have reported it as a possible FP and uploaded the file.
-
still blocked here Omid my friend :)
and avast!and everything else is up to date!!
well wait until the smoke clears then doing what you mentioned in post before mine and at your own risk ???
Off the Topic ;D
It's good for you drhayden1 because Avast is telling you should go on a diet cause your eating to much give away of the day web junk food, and I'm glad it keeping you out of trouble for being nasty and lazy...........when you blocked you are being blocked ;D have some low fat cheese! ;D ;D ;D
-
Report 2010-10-25 17:28:31 (GMT 1)
Website giveawayoftheday.com
Domain Hash 04775e04a7de8d6d650f67fd9f4b55c8
IP Address 208.88.224.199 [SCAN]
IP Hostname -
IP Country US (United States)
AS Number 40824
AS Name WZCOM-US - WZ Communications Inc.
Detections 1 / 17 (6 %)
Status SUSPICIOUS
Scanning site with: hpHosts DETECTED
http://hosts-file.net/?s=giveawayoftheday.com
Report 2010-10-25 17:06:28 (GMT 1)
IP Address 208.88.224.199
IP Hostname -
IP Country US
AS Number 40824
AS Name WZCOM-US - WZ Communications Inc.
Detections 1 / 27 (4 %)
Status SUSPICIOUS
Scanning IP with: MyWOT DETECTED
http://www.mywot.com/en/scorecard/208.88.224.199
-
Got it here too.
For the record, I've had Version 5 since January and this is the first warning I have gotten.
-
is blocked here too..
-
Blocked here and seems David has pointed out the problem...
-
Yes, but nothing yet on the 101025-1 VPS update.
-
Yes, but nothing yet on the 101025-1 VPS update.
same here....still being blocked ::)
and SpeedyPC....does it matter what Garfield eats....one day he will be chewing on your pasty rodent little tail ;D :D
-
I checked EICAR and avast block it, still avast is not blocking giveawayoftheday.com for me... weird... and using latest VDF
-
Blocked here too, Virus total says its clean so does norton safe web. I was going to include a snap shot of Avasts warning but I notice ones already here :-)
Giveaway of the day, today only, a free JS:script :P
-
the site is blocked in IE, but not in Opera.
-
Blocked in Iron (http://www.srware.net/en/software_srware_iron.php=), but not in Opera.
Iron (http://www.srware.net/en/software_srware_iron.php=) is Chrome with some privacy.
Datum: 21.09.2010
Version: 6.0.475.1
> Download < (Installer for XP,Vista)
Works great on Windows 7. :)
-
Same thing here, Avast 5.0.677 Free Version
Latest Definition updates installed a few hours ago
-
Still blocked for me. version 5.0.677 free antivirus definition 101025-1
-
Oddly enough Avast never got a chance to block it--it was stopped by my Hosts file. Guess I don't go there very often ;)
-
This very detection seems to be spread on other pages as well.
-
Oddly enough Avast never got a chance to block it--it was stopped by my Hosts file. Guess I don't go there very often ;)
I've had the site on my HostsMan exclusions list for a few weeks now. I've now taken it off the list.
-
Blocked here too!!!
-
Blocked in Iron (http://www.srware.net/en/software_srware_iron.php=), but not in Opera.
Iron (http://www.srware.net/en/software_srware_iron.php=) is Chrome with some privacy.
Datum: 21.09.2010
Version: 6.0.475.1
> Download < (Installer for XP,Vista)
Works great on Windows 7. :)
It's also blocked in Opera.
-
Blocked in Iron (http://www.srware.net/en/software_srware_iron.php=), but not in Opera.
Iron (http://www.srware.net/en/software_srware_iron.php=) is Chrome with some privacy.
Datum: 21.09.2010
Version: 6.0.475.1
> Download < (Installer for XP,Vista)
Works great on Windows 7. :)
It's also blocked in Opera.
Not for me. :)
-
Blocked in Iron (http://www.srware.net/en/software_srware_iron.php=), but not in Opera.
Iron (http://www.srware.net/en/software_srware_iron.php=) is Chrome with some privacy.
Datum: 21.09.2010
Version: 6.0.475.1
> Download < (Installer for XP,Vista)
Works great on Windows 7. :)
It's also blocked in Opera.
Not for me. :)
I just got giveawayoftheday.com repelled in Opera ??? What happened ??? Delayed reaction ???
-
so this is 100% positive right?.
i see no other antivirus with the same detection.
-
GAOTD blocked in Opera 10.63, SeaMonkey 2.0.9, IE8 here. So is this a FP or for real.
-
False positive. giveawayoftheday.com does NOT distribute/host malware of ANY sort! Looking forward to the unblocking of this blatant false positive in the next defs update
-
Avast is blocking the linkinform script at giveawayoftheday site NOT the site. It is blocking this specific site: 208.94.233.132 which is: http://statistic.link.informer.com/WebGate/SaveStatistic.aspx?VisitPage=http%3A//www.giveawayoftheday.com/startup-defender-2-2/%3Factivate&Referrer=&AccountId=b53d4fea-6544-4027-a8f5-5bf4a58c7b93&Time=1287742142425. Try to go there and watch Avast go crazy. I don't use Avast web shield. So, I got a slightly different block than many of you here got or at dslreports.com where it is also being discussed. When I tried to go to GAOTD site, Avast Network Shield blocked the linkinform java script at GAOTD and said it was trying to infect my network.
I was able to download the GAOTD which is Staff Logger 4.6. Avast did not interfere. After I downloaded it, I scanned the file with Avast and it is clean.
This is a false positive having to do with linkinform not GAOTD.
-
Just tried and nothing all i get is a blank page.
-
Yep. Sorry, that evidently is a partial link only. I copied it from ThreatExpert analysis. Try just typing in the IP address: 208.94.233.132.
-
Yeah I just had it blocked by the web shield in IE8.
-
Hey Everyone: To download the program's zip folder, you do not need to be on the web-page, you just need to know the download link or links. Copy and paste any one of the links below in the address bar of your browser and press return to download the package (or just click on one of the links if they're clickable):
Link from "Download StaffLogger 4.6 now:"
http://www.giveawayoftheday.com/download/?id=15964
Mirror link #1 (not shown anymore but still works):
http://giveawayoftheday.com/download/?id=15964&mirror=1
Direct download link for the above 2 links:
http://files.giveawayoftheday.com/StaffLogger.zip
I hope this has helped. If anyone missed the giveaway and want help, then please message me or email me at:
db.gotdhelp@lr78.com
Oh yes, by the way, you should have an extra hour after the giveaway ends (that is, after the giveaway web-page changes to the next day's giveaway) to download and activate the program.
-
Yep. Sorry, that evidently is a partial link only. I copied it from ThreatExpert analysis. Try just typing in the IP address: 208.94.233.132.
I did the first time and i get a blank page.
-
Hello,
this URL was removed from our URL blocker - it will be fixed in the next VPS
Alena Varkockova
-
Thanks for the update alenka!
P.S. @Omid The site got blocked after an VPS Update.
-
sorry for inconvenience
-
works now :)
on firefox
-
works now :)
on firefox
If it works with firefox, then it will work on the rest of the browsers too.
It wasn't a browser specific but a website block. :)
This topic should be marked as *** Solved ***
-
Confirm ***Solved***
-
Yes, this was corrected in Virus Definitions update 011026-0
-
GAOTD was blocked earlier but now I can access it. latest virus definition 101026-0
-
***solved***
avast have removed this URL from their URL blocker
likewise, HostsMan also appears to have lifted their block
-
***solved***
avast have removed this URL from their URL blocker
likewise, HostsMan also appears to have lifted their block
HostsMan is a HOSTS file manager.
The hpHosts HOSTS file still blocks it:
http://hosts-file.net/?s=giveawayoftheday.com&x=21&y=8 <== • MMT - Sites engaged in the use of misleading marketing tactics This classification is assigned to sites that use misleading tactics to push applications (e.g. affiliate sites peddling a program as a free removal tool when infact it's a free scan only) or websites.
-
yes right, is still blocked by hosts file
I'll have to open HostsMan and put the url on the Exclusion list
When I checked, I thought I had restarted my browser but maybe I hadn't
-
When I checked, I thought I had restarted my browser but maybe I hadn't
You have to stop the browser then re-start it to have the new HOSTS file recognised.
-
I think maybe I was in a rush at the time.
And the block?
- a lot of the products advertised on GAOTD have keylogger or keylogger type functionality
- some of the routine used to promote 'software informer' could be considered intrusive