Author Topic: Malicious URL http://urlfilter.vmn.net/vmnsbf/data/130...  (Read 9110 times)

0 Members and 1 Guest are viewing this topic.

Offline AlanC

  • Newbie
  • *
  • Posts: 4
I'm using the free avast, and for the past few days avast is virtually continuously telling me that it's blocking url   http://urlfilter.vmn.net/vmnsbf/data/130...

From a quick search on google it appears this is an infected url. How do I solve this problem?

Thanks,

Alan

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 66135
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Malicious URL http://urlfilter.vmn.net/vmnsbf/data/130...
« Reply #1 on: July 01, 2013, 12:14:34 PM »
Please attach your logs. (AdwCleaner, MBAM, OTL and aswMBR..!!)
Instructions: http://forum.avast.com/index.php?topic=53253.0
Win 8.1 [x64] - Avast PremSec 20.7.2422.B#2 [UI.547] - CC 5.70 - EEK - FF ESR 68.11 [NS/AOS/uBO/PB] - TB 68.11 - SB/CP/SL/DU.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline AlanC

  • Newbie
  • *
  • Posts: 4
Re: Malicious URL http://urlfilter.vmn.net/vmnsbf/data/130...
« Reply #2 on: July 01, 2013, 05:37:05 PM »
I've followed the instructions and attach the logs. The OTL scan only opened one Notepad window, there wasn't one for Extras.txt.

What happens now?

Thanks,

Alan

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 66135
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Malicious URL http://urlfilter.vmn.net/vmnsbf/data/130...
« Reply #3 on: July 01, 2013, 05:41:17 PM »
What happens now?

Now you've to wait a bit.
Win 8.1 [x64] - Avast PremSec 20.7.2422.B#2 [UI.547] - CC 5.70 - EEK - FF ESR 68.11 [NS/AOS/uBO/PB] - TB 68.11 - SB/CP/SL/DU.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline magna86

  • Anti Malware Fighter
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4235
    • Ambulanta MyCity Forum - ASAP Member
Re: Malicious URL http://urlfilter.vmn.net/vmnsbf/data/130...
« Reply #4 on: July 01, 2013, 06:14:31 PM »
I'm on it ...

Offline magna86

  • Anti Malware Fighter
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4235
    • Ambulanta MyCity Forum - ASAP Member
Re: Malicious URL http://urlfilter.vmn.net/vmnsbf/data/130...
« Reply #5 on: July 01, 2013, 06:23:57 PM »
@AlanC,
Welcome to avast. I will be working on your Malware issues.



Download TDSSKiller  and save it to your desktop

    Execute TDSSKiller.exe by doubleclicking on it.

  •     Press Start Scan

     
  •   If Suspicious object is detected, the default action will be Skip, click on Continue.
     
  •   If Malicious objects are found, select Cure.
Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.<version_date_time>log.txt


Please post the contents of that log in your next reply.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 32622
  • malware fighter
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline AlanC

  • Newbie
  • *
  • Posts: 4
Re: Malicious URL http://urlfilter.vmn.net/vmnsbf/data/130...
« Reply #7 on: July 01, 2013, 07:31:31 PM »
Thanks for your help! Attached is the log from the TDSSKiller scan.

Thanks,

Alan

Offline magna86

  • Anti Malware Fighter
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4235
    • Ambulanta MyCity Forum - ASAP Member
Re: Malicious URL http://urlfilter.vmn.net/vmnsbf/data/130...
« Reply #8 on: July 01, 2013, 08:17:02 PM »
@AlanC
I don't see active malware on your system. You may remove your tool by re-runing OTL and clicking on CleanUp! button.
If you wish, we can run additional checking but I would say that there is no need for that.

Offline denics

  • Avast team
  • Full Member
  • *
  • Posts: 168
    • avast!
Re: Malicious URL http://urlfilter.vmn.net/vmnsbf/data/130...
« Reply #9 on: July 01, 2013, 09:21:10 PM »
Guys,
this issue is caused by Antiphishing Domain Advisor. The program downloads unencrypted list of malicious urls and avast! detects the urls therefore the list gets blocked. This issue is not fixable on our side. Uninstalling Antiphishing Domain Advisor will solve this.
Denis Konopiský - avast! VirusLab | Android & Windows Malware | VPS Operations | Whitelisting

Offline AlanC

  • Newbie
  • *
  • Posts: 4
Re: Malicious URL http://urlfilter.vmn.net/vmnsbf/data/130...
« Reply #10 on: July 01, 2013, 09:46:18 PM »
Thanks guys! Don't know whether it's coincidence or not, but avast hasn't blocked anything since I downloaded and ran the various programmes.

I'll follow your suggestion on re-running OTL Magna.

I don't see Antiphishing Domain Adviser anywhere denics - would this show on my list of programmes if it was installed?

Offline magna86

  • Anti Malware Fighter
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4235
    • Ambulanta MyCity Forum - ASAP Member
Re: Malicious URL http://urlfilter.vmn.net/vmnsbf/data/130...
« Reply #11 on: July 01, 2013, 10:49:33 PM »
Thank you denics for tip & jump in.  :)

@AlanC
Nothing was done except that AdwCleaner has been cleand up your computer from bunch of varius garbage.
Quote
I don't see Antiphishing Domain Adviser anywhere denics - would this show on my list of programmes if it was installed?
AdwCleaner has been detect & remove Anti-phishing Domain Advisor.  :)

Offline denics

  • Avast team
  • Full Member
  • *
  • Posts: 168
    • avast!
Re: Malicious URL http://urlfilter.vmn.net/vmnsbf/data/130...
« Reply #12 on: July 02, 2013, 08:22:25 AM »
Thanks guys! Don't know whether it's coincidence or not, but avast hasn't blocked anything since I downloaded and ran the various programmes.

I'll follow your suggestion on re-running OTL Magna.

I don't see Antiphishing Domain Adviser anywhere denics - would this show on my list of programmes if it was installed?

Probably yes.. most of the times this issue is caused by Antiphishing Domain Advisor, but it might just happen that some other program is using the same database for updates, so you should look for any programs that could use it.
Denis Konopiský - avast! VirusLab | Android & Windows Malware | VPS Operations | Whitelisting

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36729
Re: Malicious URL http://urlfilter.vmn.net/vmnsbf/data/130...
« Reply #13 on: July 02, 2013, 09:25:15 AM »
Quote
I don't see Antiphishing Domain Adviser anywhere denics - would this show on my list of programmes if it was installed?
from AdwCleaner log.  :)

Quote
Folder Deleted : C:\ProgramData\Anti-phishing Domain Advisor
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Anti-phishing Domain Advisor
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Anti-phishing Domain Advisor]



Anti-phising Domain Advisor problem has been posted here many times before.... so you find more info if you do a forum search

here is one. http://forum.avast.com/index.php?topic=119552.msg919179#msg919179

 
« Last Edit: July 02, 2013, 09:31:29 AM by Pondus »