Author Topic: Bloqueando site  (Read 9331 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Re: Bloqueando site
« Reply #15 on: July 04, 2016, 12:32:19 PM »
now he returned to block random pages that after updating it does not block more, it makes no sense if he had any malisioso file would be a very smart malisioso file to be able to do this if you really hesitate this malware it should bloquer always and not sometimes random, or not block any description after being deactivated and reactivated. DOES NOT MAKE SENSE. and even removing the qj it continues blocking. For God's sake I'm talking about that had happened it before and so decided to upgrade.

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Bloqueando site
« Reply #16 on: July 04, 2016, 12:34:30 PM »
I disabled it, and reactivated, what happened? The SITE OPENED NORMALLY WITHOUT PROBLEMS, ALL PAGES!

Yes, Avast holds a cache of last accessed malicious URLs/files and if there is an update, it needs to have the shields refreshed. This happens automatically for example when you close browser, or after some time, or you can invoke it manually by turning the shields off and on / turning Avast off and on / turning your PC off and on.
No suprise here, and it only indicates that your site WAS infected and that after deleting the malicious code, we stopped blocking you.

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Bloqueando site
« Reply #17 on: July 04, 2016, 12:35:25 PM »
now he returned to block random pages that after updating it does not block more, it makes no sense if he had any malisioso file would be a very smart malisioso file to be able to do this if you really hesitate this malware it should bloquer always and not sometimes random, or not block any description after being deactivated and reactivated. DOES NOT MAKE SENSE. and even removing the qj it continues blocking. For God's sake I'm talking about that had happened it before and so decided to upgrade.
Please restart your PC and if there is a popup after that, take a printscreen and post it here ;)

REDACTED

  • Guest
Re: Bloqueando site
« Reply #18 on: July 04, 2016, 12:42:50 PM »
;

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Bloqueando site
« Reply #19 on: July 04, 2016, 12:51:12 PM »
Uhm... I do not see any Avast popup on the printscreen you posted. Is there still any issue?

REDACTED

  • Guest
Re: Bloqueando site
« Reply #20 on: July 04, 2016, 12:56:34 PM »
 block random;

REDACTED

  • Guest
Re: Bloqueando site
« Reply #21 on: July 04, 2016, 01:05:29 PM »
......................................

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Bloqueando site
« Reply #22 on: July 04, 2016, 01:06:44 PM »
The sites that Avast complains on are the sites that the script is on. Remove any obfuscated javascripts to see if it helps...

REDACTED

  • Guest
Re: Bloqueando site
« Reply #23 on: July 04, 2016, 01:07:53 PM »
I put this to you see "show last message" to not say that simply closed

REDACTED

  • Guest
Re: Bloqueando site
« Reply #24 on: July 04, 2016, 01:10:06 PM »
random pages, even with the same structure, one is locked, the other not. OK

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Bloqueando site
« Reply #25 on: July 04, 2016, 01:12:37 PM »
Might have the same stucture, definitely doesn't have the same code.

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: Bloqueando site
« Reply #26 on: July 04, 2016, 01:32:51 PM »
random pages, even with the same structure, one is locked, the other not. OK

Detection is correct JS:Downloader-DEH[Trj]
the malicious code needs to be cleaned is on the line 2622

see attached
« Last Edit: July 04, 2016, 01:34:54 PM by jefferson sant »

REDACTED

  • Guest
Re: Bloqueando site
« Reply #27 on: July 04, 2016, 01:46:45 PM »
removido.
continua bloqueando.

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: Bloqueando site
« Reply #28 on: July 04, 2016, 01:52:13 PM »
removido.
continua bloqueando.

remover o código obfuscado das linhas 2640 e 2643
em anexo


Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Bloqueando site
« Reply #29 on: July 04, 2016, 06:06:30 PM »