« previous next »
Pages: [1]   Go Down

Author Topic: Fake message block my websites!!! HTML:Framer-inf [Trj]  (Read 7584 times)

0 Members and 1 Guest are viewing this topic.

alexandergoranov88

  • Guest
Fake message block my websites!!! HTML:Framer-inf [Trj]
« on: January 07, 2014, 12:04:18 PM »
Fake message block my websites!!!

HTML:Framer-inf [Trj]

My websites was checked with many tools include Total Virus

https://www.virustotal.com/en/url/48c4d76819cd0d19f1344bfae5caf451736d23d9837848a9300eb2aedab7bc7d/analysis/1389091918/

https://www.virustotal.com/en/url/7d5c631672f93ee20df405b1b87733e162f45396aaeb7f0f0014a03ee618a873/analysis/1389091960/

Please, Avast fix this problem soon as possible
« Last Edit: January 07, 2014, 12:07:18 PM by alexandergoranov88 »
Logged

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: Fake message block my websites!!! HTML:Framer-inf [Trj]
« Reply #1 on: January 07, 2014, 12:16:38 PM »
Hi,

I'll have Polonus take a look since I cna't do anything other then VT on websites.
Logged
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76014
    • >>> Avast Forum - Deutschsprachiger Bereich <<<
Re: Fake message block my websites!!! HTML:Framer-inf [Trj]
« Reply #2 on: January 07, 2014, 12:18:25 PM »
Logged
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Fake message block my websites!!! HTML:Framer-inf [Trj]
« Reply #3 on: January 07, 2014, 12:19:41 PM »
@alan:You can take a look from many testing sites here: http://scanurl.net/

I cannot see anything malicious there.
Logged
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

AdrianH

  • Guest
Re: Fake message block my websites!!! HTML:Framer-inf [Trj]
« Reply #4 on: January 07, 2014, 12:23:53 PM »
That site loads fine for me.  No warnings or blocking.
Logged

alexandergoranov88

  • Guest
Re: Fake message block my websites!!! HTML:Framer-inf [Trj]
« Reply #5 on: January 07, 2014, 12:26:58 PM »
When Avast installed on a computer fake messages appear.
« Last Edit: January 07, 2014, 12:28:57 PM by alexandergoranov88 »
Logged

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: Fake message block my websites!!! HTML:Framer-inf [Trj]
« Reply #6 on: January 07, 2014, 12:28:15 PM »
Try updating your VPS and Program.

VPS: http://www.avast.com/en-eu/download-thank-you.php?product=VPS9&locale=en-eu
program: Warning: YOu're using v8, not the latest: http://www.avast.com/en-eu/index

Note: If you upgrade, you shouldn't need a VPS update.

« Last Edit: January 07, 2014, 12:31:03 PM by alan1998 »
Logged
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

AdrianH

  • Guest
Re: Fake message block my websites!!! HTML:Framer-inf [Trj]
« Reply #7 on: January 07, 2014, 12:31:39 PM »
Quote from: alexandergoranov88 on January 07, 2014, 12:26:58 PM
When Avast installed on a computer fake messages appear.

I use avast and your site works for me.
Logged

alexandergoranov88

  • Guest
Re: Fake message block my websites!!! HTML:Framer-inf [Trj]
« Reply #8 on: January 07, 2014, 12:34:26 PM »
Some people still complain. I don't know where is the problem with Avast
Logged

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37698
Re: Fake message block my websites!!! HTML:Framer-inf [Trj]
« Reply #9 on: January 07, 2014, 12:38:34 PM »
Quote from: alexandergoranov88 on January 07, 2014, 12:34:26 PM
Some people still complain. I don't know where is the problem with Avast
tell them to do a manuall avast update .... wait a couple of minutes and try again

Logged

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37698
Re: Fake message block my websites!!! HTML:Framer-inf [Trj]
« Reply #10 on: January 07, 2014, 12:42:11 PM »
if still a problem, report it here

You can upload files and report issues to avast  here : http://www.avast.com/contact-form.php  (select subject according to Your case)

you may add a link to this topic in case they reply here....



Logged

alexandergoranov88

  • Guest
Re: Fake message block my websites!!! HTML:Framer-inf [Trj]
« Reply #11 on: January 07, 2014, 01:01:42 PM »
Eveything is fine. To everyone: Update your Antivirus

http://www.avast.com/en-eu/download-thank-you.php?product=VPS9&locale=en-eu
Logged

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34051
  • malware fighter
Re: Fake message block my websites!!! HTML:Framer-inf [Trj]
« Reply #12 on: January 07, 2014, 01:21:30 PM »
But what are the errors I get here? -> http://jsunpack.jeek.org/?report=62e3f6138b9aed1800846e71ec4a5981931b6e6c
and for the main file I get:
Code: [Select]
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "htxp://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title></title><meta http-equiv="refresh" content="0;url= htxp___alexandergoranov.com/Dobre_dosli_v_nasata_realnost.html" /></head><body></body></html><style>@import url(htxp://neq3hosting.com/x.css);</style> This is OK: https://urlquery.net/report.php?id=8733909
- benign: http://jsunpack.jeek.org/?report=c063f67b29b211979632b77fe8a50ddfa277d30a
Site redirects to: http://alexandergoranov.uco.im/http___alexandergoranov.com/Dobre_dosli_v_nasata_realnost.html
Your site is part of a gigantic criminal network of random scammers, read here: http://flakelist.org/page/viewpub/tid/1/pid/9636
sena dot uco dot im garbage mail scam flagged is line 11
Code: [Select]
<frame src="htxp://alexandergoranov.uco.im" frameborder="0" />
polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34051
  • malware fighter
Re: Fake message block my websites!!! HTML:Framer-inf [Trj]
« Reply #13 on: January 07, 2014, 01:24:11 PM »
Alsoi consider this: Seems unblocked now: http://aqmthai.com/

This was in the urlquery history however: http://urlquery.net/report.php?id=1762131
There was exploit kit garbage found: http://comments.gmane.org/gmane.comp.security.ids.snort.emerging-sigs/18009

Here it is being given clean: http://urlquery.net/report.php?id=8733430
and here: http://maldb.com/aqmthai.com/
Code hick-up here: aqmthai dot com/jquery/js/jquery-ui-1.8.2.custom.min.js benign
[nothing detected] (script) aqmthai dot com/jquery/js/jquery-ui-1.8.2.custom.min.js
     status: (referer=aqmthai dot com/)saved 206991 bytes ee9fb45a057673e22bc8134dd4ea0602f82cc058
     info: [iframe] aqmthai dot com/jquery/js/javascript:false;
     info: [decodingLevel=0] found JavaScript
     suspicious:

Found with injection chcek (from earlier compromise? -> Suspicious Text before HTML    

pol
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pages: [1]   Go Up
« previous next »