Author Topic: larryjoy.com  (Read 542 times)

0 Members and 1 Guest are viewing this topic.

Offline Peter82

  • Newbie
  • *
  • Posts: 1
larryjoy.com
« on: April 17, 2022, 03:21:52 AM »
Every time I do a Google search I get a notice saying that Avast has aborted a connection to larryjoy.com.  Why is Google trying to connect to an infected URL?

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 75422
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: larryjoy.com
« Reply #1 on: April 17, 2022, 10:05:04 AM »
Win 8.1 [x64] - Avast PremSec 22.5.7216.B [UI.704] - Firefox ESR 91.9 [NS/uBO/PB] - Thunderbird 91.9.0
Avast-Tools: Secure Browser 101.0 - Cleanup 22.2 - SecureLine 5.18 - Driver Updater 22.2 - CCleaner 6.0
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33580
  • malware fighter
Re: larryjoy.com
« Reply #2 on: April 17, 2022, 11:56:17 AM »
Other support questions about this Trojan infection, read:
https://support.avg.com/answers?id=9065p000000Q4SyAAK

The blocking eventually was removed by MBAM, as you can read here:
https://forums.malwarebytes.com/topic/269760-larryjoy-trojan/
Cloudflare should tackle this: https://whoislookupdb.com/whois-172.67.223.21

Re: https://urlscan.io/result/c0fcee13-bb7f-413d-9cdd-65fed50e7e92/#indicators
Comes up with a console message:
Quote
Failed to load resource: the server responded with a status of 403 (Forbidden)
AT VT links we establish address comes up with an error-landing:
https://www.cloudflare.com/5xx-error-landing
Re: https://www.virustotal.com/gui/url/72220e2a2e1b36610c2efcd3585aa08ba8021ad13891821e47bbfd1f26709128/community

Wait for a final verdict from Avast Team, we here are just volunteers with relevant knowledge,
so as we may conclude from commenters at VT's the ball definitely homes back to Cloudflare's.  :)

As Cloudflare respond on their error-522 page
Quote
You were visiting a Cloudflare customer’s website, and something went wrong. Don’t worry, it’s not your fault. If the problem isn’t resolved in the next few minutes, it’s most likely an issue with the web server you were trying to reach.

Cloudflare protects websites by sitting in front of Internet requests, and we work with website owners and hosting providers to identify underlying problems in their server configuration.
That's all we know folks, have a good Easter/Spring Festival.

polonus
« Last Edit: April 17, 2022, 03:55:31 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 75422
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Win 8.1 [x64] - Avast PremSec 22.5.7216.B [UI.704] - Firefox ESR 91.9 [NS/uBO/PB] - Thunderbird 91.9.0
Avast-Tools: Secure Browser 101.0 - Cleanup 22.2 - SecureLine 5.18 - Driver Updater 22.2 - CCleaner 6.0
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33580
  • malware fighter
Re: larryjoy.com
« Reply #4 on: April 17, 2022, 04:04:40 PM »
Hi Asyn,

In that case very good it is being blocked and Cloudflare stopped access as it was reported to them apparently via
-abuse@cloudflare.com
Good we delved into this, all's well that ends well (when malware is rightfully being detected).

Best Easter-greetings, and keep your cyber-connections malcode-free...

Damian
« Last Edit: April 17, 2022, 04:06:57 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 75422
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: larryjoy.com
« Reply #5 on: April 17, 2022, 04:44:34 PM »
Hi Damian, Happy Easter..!! :)
Win 8.1 [x64] - Avast PremSec 22.5.7216.B [UI.704] - Firefox ESR 91.9 [NS/uBO/PB] - Thunderbird 91.9.0
Avast-Tools: Secure Browser 101.0 - Cleanup 22.2 - SecureLine 5.18 - Driver Updater 22.2 - CCleaner 6.0
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0