Author Topic: infection blocked URL: http://108.59.10.141/cen?ag infection: URL:Mal  (Read 2556 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
This is popping up every few minutes.  I have run Malwarebytes and deleted all of the files it found, and rebooted.  What should be done next?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: infection blocked URL: http://108.59.10.141/cen?ag infection: URL:Mal
« Reply #1 on: January 15, 2014, 06:42:09 PM »
If it is still occurring then follow the steps here http://forum.avast.com/index.php?topic=53253.0
And attach the logs in this thread :)

Offline Para-Noid

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 6699
  • Trust only what you test yourself!
Re: infection blocked URL: http://108.59.10.141/cen?ag infection: URL:Mal
« Reply #2 on: January 15, 2014, 10:01:26 PM »
Running the IP address I found this http://zulu.zscaler.com/submission/show/6ee5b0bbf21408abf2bf6c9ea555f2ed-1389819083
Thai shows not only redirections but also a "parked" domain.

This http://www.urlvoid.com/ip/108.59.10.141 shows multiple website hosted by the same IP address.
This should give cause for clickjacking and redirections.

Clickjacking explained here.
Dell Inspiron, Win10x64--HP Envy Win10x64--Both systems Avast Free v17.9.2322, Comodo Firewall v8.2 w/D+, MalwareBytes v3.0, OpenDNS, Super Anti-Spyware, Spyware Blaster, MCShield, Unchecky, Vivaldi Browser and, various browser security tools.

"Look before you leap!" Use online scanners before you click on any link.