Author Topic: Is this sitecorrect legitimate?  (Read 3125 times)

0 Members and 1 Guest are viewing this topic.

Drezair

  • Guest
Is this sitecorrect legitimate?
« on: December 01, 2012, 01:06:16 AM »
I've been getting this popup a lot lately. Whenever I return to my computer from being away for an extended period of time I get this pop up no matter what site i try to visit.

http://i.imgur.com/9IMqp.jpg

Is this legitimate? Is this a feature that is built into avast? I cannot find an option for it anywhere.


Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89659
  • No support PMs thanks
Re: Is this sitecorrect legitimate?
« Reply #1 on: December 01, 2012, 01:21:17 AM »
Yes, SiteCorrect is a function within the WebRep - AvastUI, Additional Protection, Browser Protection, Settings SiteCorrect.

Though I have never actually seen the popup notification, it is looking for sites that you may have accidentally typed incorrectly (so it will ask). The reason for this is there are a lot of sites out there which use typo squatting to drive traffic to their site should you make a typo on a well-known name. In some cases these typo squatting sites could well be malicious.

Whilst reddit.com is correct it could well be a typo for say readit.com.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD - 27" external monitor 1440p 2560x1440 resolution - avast! free  24.9.6130 (build 24.9.9452.762) UI 1.0.818/ Firefox, uBlock Origin Lite, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67185
Re: Is this sitecorrect legitimate?
« Reply #2 on: December 01, 2012, 03:27:34 PM »
I was trying to test SiteCorrect and accidentally I've come to this ;D
The best things in life are free.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34049
  • malware fighter
Re: Is this sitecorrect legitimate?
« Reply #3 on: December 01, 2012, 03:42:19 PM »
See the suspicious script found here: http://zulu.zscaler.com/submission/show/7f778851b3944a850fa43a7a1b545144-1354372463

Potentially Suspicious files according to Quttera: 2
/index.html
File size[byte]:   
94602
Threat type:   
Potentially Suspicious
Details:   
Our investigation system run out of memory used for execution process.
Reason:   
Reached execution stack limit. Stack content: [ l ][ l ][ l ][ l ][ l ][ l ][ l ][ l ][ l ][ l ][ l ][ l ][ l ][ l ][ l ][ l ][ l ][ l ][ l ][ l ]
MD5:   
9E2C783F014A1548F92322D6EBB15E3B
Scan duration[sec]:   
1.646000
plus.google.com/?gpsrc=ogpy0&tab=wX
File size[byte]:   
73614
Threat type:   
Potentially Suspicious
Details:   
Detected hidden reference to external web resource.
Reason:   
Detected generation of hidden DOM element [iframe].
MD5:   
1CAAD74A7915C1BF8313961FDCF4E74E
Scan duration[sec]:   
0.24100

Data fron Quttera scan for that particular site...

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Drezair

  • Guest
Re: Is this sitecorrect legitimate?
« Reply #4 on: December 01, 2012, 10:53:38 PM »
Ok, Thank you for the advice. I thought it was part of avast and after googling for as much information as I could I saw that it was. What concerned me was the pop-up for whatever site I went too. Even going to google.com set it off. That is what concerned me.

Thank You again for your help.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89659
  • No support PMs thanks
Re: Is this sitecorrect legitimate?
« Reply #5 on: December 02, 2012, 12:08:44 AM »
You're welcome.

For me using firefox it has never appeared, but then again it don't make many mistakes and most of the urls I visit are from links.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD - 27" external monitor 1440p 2560x1440 resolution - avast! free  24.9.6130 (build 24.9.9452.762) UI 1.0.818/ Firefox, uBlock Origin Lite, uMatrix/ MailWasher Pro/ Avast! Mobile Security