« previous next »
Pages: [1] 2   Go Down

Author Topic: Every day avast block my sites !!!!  (Read 5452 times)

0 Members and 1 Guest are viewing this topic.

vivo

  • Guest
Every day avast block my sites !!!!
« on: March 12, 2014, 10:44:08 AM »
depuis une semaine chaque jour je trouve que avast bloque l'un de mes sites

hesball.net
zizocar.net
vanball.com
jbilo.com
havanvan.com

i don't know what is the problem , all the sites not contain any virus



Logged

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: Every day avast block my sites !!!!
« Reply #1 on: March 12, 2014, 10:52:53 AM »
URL : Mal means they are on an URL or IP Block list.
Logged
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37553
  • Not a avast user
Re: Every day avast block my sites !!!!
« Reply #2 on: March 12, 2014, 10:53:39 AM »
Logged

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: Every day avast block my sites !!!!
« Reply #3 on: March 12, 2014, 10:56:42 AM »
It appears you've been hacked. Massive redirects to hXXp://wXw.vivocar.com
« Last Edit: March 12, 2014, 10:58:43 AM by Michael (alan1998) »
Logged
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37553
  • Not a avast user
Re: Every day avast block my sites !!!!
« Reply #4 on: March 12, 2014, 11:00:32 AM »
all websites are on same IP ( 87.98.166.118 ) and is blacklisted here http://www.apews.org/

Quote
CASE: C-22
Dynamic IP space, generic DNS/rDNS, no PTR
Direct connections to MX not permitted, you
need to use your ISP servers or smarthost

urlQuery  http://urlquery.net/report.php?id=9867160
Intrusion Detection Systems Suricata filter alerts
« Last Edit: March 12, 2014, 11:04:46 AM by Pondus »
Logged

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: Every day avast block my sites !!!!
« Reply #5 on: March 12, 2014, 11:04:01 AM »
Not only that. Yuo've been blacklisted for 3 years. 2011-02-21 2011-03-02: Entry changed from 87.98.166.0/23 to 87.98.166.0/24

Oh, Pondus, thanks for removing that dupped post :)
Logged
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37553
  • Not a avast user
Re: Every day avast block my sites !!!!
« Reply #6 on: March 12, 2014, 11:05:44 AM »
Quote
Oh, Pondus, thanks for removing that dupped post
huh ?     ???

Logged

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76035
    • >>> Avast Forum - Deutschsprachiger Bereich <<<
Re: Every day avast block my sites !!!!
« Reply #7 on: March 12, 2014, 11:07:57 AM »
Quote from: Pondus on March 12, 2014, 11:05:44 AM
Quote
Oh, Pondus, thanks for removing that dupped post
huh ?     ???

I removed it. ;)
Logged
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Every day avast block my sites !!!!
« Reply #8 on: March 12, 2014, 11:15:20 AM »
Logged

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76035
    • >>> Avast Forum - Deutschsprachiger Bereich <<<
Re: Every day avast block my sites !!!!
« Reply #9 on: March 12, 2014, 11:19:53 AM »
Quote from: Eddy on March 12, 2014, 11:15:20 AM
This is a double post.
http://forum.avast.com/index.php?topic=147487.msg1070921#msg1070921

In fact, the OP did post it 4 times, 2 were removed, leaving the ones in different languages.
Logged
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

vivo

  • Guest
Re: Every day avast block my sites !!!!
« Reply #10 on: March 12, 2014, 11:25:09 AM »
i don't know what i do now , i need to change the host ???
Logged

vivo

  • Guest
Re: Every day avast block my sites !!!!
« Reply #11 on: March 12, 2014, 11:26:10 AM »
Quote from: Michael (alan1998) on March 12, 2014, 10:56:42 AM
It appears you've been hacked. Massive redirects to hXXp://wXw.vivocar.com

no , i just redirect the old site to the new
Logged

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: Every day avast block my sites !!!!
« Reply #12 on: March 12, 2014, 02:09:46 PM »
Then why does it also redirect to other sub-domains?

Eg: wXw.vivocar.com/mercades.

If you're attempting to redirect to your new domain, then why have a buch of other redirects? It looks very suspicious too me.

THank Asyn, thought Pondus removed it.
Logged
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33925
  • malware fighter
Re: Every day avast block my sites !!!!
« Reply #13 on: March 13, 2014, 01:37:47 AM »
Suspicious code there, see image attached.
Emsisoft reports this as Gen:Adware.MPlug.1 (B)

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6674
  • volunteer
Re: Every day avast block my sites !!!!
« Reply #14 on: March 13, 2014, 03:51:23 AM »
not is a false positive
vanball.com
hesball.net

http://urlquery.net/report.php?id=9867160

URL unblocked
zizocar.net
jbilo.com
havanvan.com
Logged
Pages: [1] 2   Go Up
« previous next »