Avast WEBforum
Other => General Topics => Topic started by: Gunnerss on December 11, 2011, 06:51:00 PM
-
My site is blocking avast maxmob.ru
http://www.virustotal.com/url-scan/report.html?id=b33b22c6facaeead70d0a44482ffd055-1323621330
Please remove the site maxmob.ru from the blacklist.
-
You can report a possible FP here: http://www.avast.com/contact-form.php?loadStyles
Report 2011-12-11 17:54:50 (GMT 1)
Website maxmob.ru
Domain Hash b623aa5812f7a5b2b296311e84c47579
IP Address 77.222.34.18 [SCAN]
IP Hostname 77.222.34.18.peterhost.ru
IP Country RU (Russian Federation)
AS Number 42751
AS Name PETERHOST-MOSCOW-DC2 Concorde Ltd.
Detections 0 / 23 (0 %)
Status CLEAN
Report 2011-12-11 18:49:45 (GMT 1)
IP Address 77.222.34.18
IP Hostname 77.222.34.18.peterhost.ru
IP Country RU
AS Number N/A
AS Name N/A
Detections 0 / 26 (0 %)
Status CLEAN
PS: Also clean on Sucuri.
-
You can report a possible FP here: http://www.avast.com/contact-form.php?loadStyles
Report 2011-12-11 17:54:50 (GMT 1)
Website maxmob.ru
Domain Hash b623aa5812f7a5b2b296311e84c47579
IP Address 77.222.34.18 [SCAN]
IP Hostname 77.222.34.18.peterhost.ru
IP Country RU (Russian Federation)
AS Number 42751
AS Name PETERHOST-MOSCOW-DC2 Concorde Ltd.
Detections 0 / 23 (0 %)
Status CLEAN
Report 2011-12-11 18:49:45 (GMT 1)
IP Address 77.222.34.18
IP Hostname 77.222.34.18.peterhost.ru
IP Country RU
AS Number N/A
AS Name N/A
Detections 0 / 26 (0 %)
Status CLEAN
PS: Also clean on Sucuri.
I wrote to FP
maxmob.ru will be removed from the blacklist?
-
maxmob.ru will be removed from the blacklist?
The guys at the viruslab will check it. ;)
-
how long it takes to check?
-
how long it takes to check?
Usually they're rather quick.
-
how long it takes to check?
Usually they're rather quick.
Thank you ;)
-
Thank you ;)
You're welcome..!
-
Why does my site maxmob.ru now back in the black list?
-
Why does my site maxmob.ru now back in the black list?
what does the avast warning say?
can you attach a screenshot of the pop-up ?
-
Why does my site maxmob.ru now back in the black list?
what does the avast warning say?
can you attach a screenshot of the pop-up ?
that's what shows
When you remove my site from the blacklist ?
-
When you remove my site from the blacklist ?
sorry i dont work for avast
but they monitor the forum so by adding info you give them something to work on
and you can use the link Asyn posted to report it as FP......again
you may add a link to this topic
-
The link to your picture is triggering avast here - could you remove the link please
-
The link to your picture is triggering avast here - could you remove the link please
Because it is located on the domain that is blocked.
Image is attached, so it can be removed from the post above ;)
-
Sent a message to the fp that still need to do to unlock ?
-
Why does my site is still in the black list ?
-
What is your vps version?
I get no alert with 120316-0
Please update avast and try again ;)
-
What is your vps version?
I get no alert with 120316-0
Please update avast and try again ;)
I get Network Shield warning URL:Mal here with 120316-0 VPS. :(
-
I get no alert on the site either Scott (firefox 11.0, noscript and requestpolicy add-ons enabled for the site), VPS 120316-0.
-
Why does my site maxmob.ru now back in the black list?
I answered this question and maxmob.ru still gives warning here.
-
As have Scott and I and we don't get an alert.
-
Very strange.
I tried again opening maxmob.ru in a new tab in Firefox 10.0.2.
Didn't get a chance to go there.
Red alert from Network Shield.
"MALICIOUS URL BLOCKED"
maxmob.ru
URL:Mal
Blocked
Suppose we have to live with the difference.
This is on Avast!5 free, but I believed URL-blocking would be identical across different versions.
-
Suppose we have to live with the difference.
This is on Avast!5 free, but I believed URL-blocking would be identical across different versions.
No problem with avast! v7
-
This is what meets me when (trying to) open maxmob.ru in a new tab:
-
Strange but why on different versions of Avast on my site reacts differently? how can I solve this problem?
-
Here I get a benign: htxp://zulu.zscaler.com/submission/show/99afaa5c1c518482700106835fca21d2-1331924580
Some counter script there but benign as I can establish, but could be a Phish,
polonus
-
This is what meets me when (trying to) open maxmob.ru in a new tab:
Are you using avast! v7?
Do you get it on the W7 Pro 64-bits system?
-
Why does my site maxmob.ru now back in the black list?
I answered this question and maxmob.ru still gives warning here.
Just updated to 120316-1 VPS, and no more warning from maxmob.ru. :)
-
Strange but why on different versions of Avast on my site reacts differently?
Because avast! 5 has no stream updates. ;)
-
Strange but why on different versions of Avast on my site reacts differently?
Because avast! 5 has no stream updates. ;)
Interesting, we can now see the effect of the streaming updates. :)
Unleash the confusion on those trying to help... (Maybe we could have some indicator that the detection is from streaming updates?)
-
Plus it shows that the streaming update is another vital tool
-
Hi essexboy,
Yes this is a very vital addition to daily updates - streaming updates from the cloud.
Malware status can change and be anything from a couple of hours active to long overdue, closed down, non-responsive, browser and geo-location specific.
Youl remember that recent three hours activity of a new version of Sinowal trial run that was performed from a Dutch news site, I PM-ed you about. In such cases streaming updates can play a vital role, but it is a bit like in the story of the "Three Musketeers": Unus pro omnibus, omnes pro uno aka "One for all, all for one"
polonus
-
Plus it shows that the streaming update is another vital tool
Absolutely..!! Even more vital for quick blacklisting than whitelisting. ;)
-
Strange but why on different versions of Avast on my site reacts differently?
Because avast! 5 has no stream updates. ;)
Interesting, we can now see the effect of the streaming updates. :)
Unleash the confusion on those trying to help... (Maybe we could have some indicator that the detection is from streaming updates?)
Isn't the information installed through a streaming update eventually included in a regular virus data base update to protect every one ???
-
Isn't the information installed through a streaming update eventually included in a regular virus data base update to protect every one ???
Yes, it's supposed to be and it was this time, too, but some hours later than thru the streaming update.
The OP and I got confused because I and others complained about the FP,
while 'the regulars' ;) here with Avast 7 didn't get the FP any longer.
At last I got the update as described here thru ordinary VPS-update:
http://forum.avast.com/index.php?topic=90326.msg763407#msg763407
It was first many hours later that this mystery got an explanation.