Author Topic: URL: Blacklist notification  (Read 67623 times)

0 Members and 2 Guests are viewing this topic.

Offline 7PCGamer

  • Newbie
  • *
  • Posts: 3
URL: Blacklist notification
« on: February 13, 2019, 07:24:49 AM »
Hi,

Trust you are doing well.
Just curious to know abt the URL: Blacklist notification, cud'nt find any documentation
.. is it some virus script codenamed "Blacklist"?

The msg popped when I was trying to access
https://www.locusinn.com/games/divinity/guides/DivinityQuestGuideV2.pdf
.. and it automatically terminates the connection.
Am using Avast Secure Browser latest version on a fully updated Win 7 HP x64.

I also checked the website profile on VirusTotal ... came out clean (snap attached)

Am getting similar messages frequently for 1st page results on Google.. anything wrong with my settings?

Thanks.


Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36631
Re: URL: Blacklist notification
« Reply #1 on: February 13, 2019, 07:48:14 AM »
Quote
Just curious to know abt the URL: Blacklist notification, cud'nt find any documentation
.. is it some virus script codenamed "Blacklist"?

Blacklist (computing)   
https://en.wikipedia.org/wiki/Blacklist_(computing)
https://en.wikipedia.org/wiki/Wikipedia:Spam_blacklist
https://en.wikipedia.org/wiki/Template:Blacklisted-links




You dont give any info / screenshot about what avast say so we have to guess .......






« Last Edit: February 13, 2019, 08:26:59 AM by Pondus »

Offline 7PCGamer

  • Newbie
  • *
  • Posts: 3
Re: URL: Blacklist notification
« Reply #2 on: February 13, 2019, 08:00:13 AM »

Thanks for the revert.
It says "infected with URL:Blacklist"
Will soon update the full string of notification.
I dont have access to this specific computer right now..


Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36631
Re: URL: Blacklist notification
« Reply #3 on: February 13, 2019, 08:12:42 AM »
Quote
It says "infected with URL:Blacklist"
OK it seems avast may have changed a detection name? as i have not seen that before


It used to be:
URL:Mal = Blacklisted URL or IP
PDF:UrlMal-inf [Trj] = pdf.doc that containe link to a blacklisted URL


The infected with is just a general text that is on top of all messages even if it is not a infection





Offline 7PCGamer

  • Newbie
  • *
  • Posts: 3
Re: URL: Blacklist notification
« Reply #4 on: February 13, 2019, 04:13:08 PM »
Hi,
Heres the full string:
"Weve safely aborted connection on www.locusinn.com because it was infected with URL:Blacklist"

I am merely posing this as an example .. this kind of intervention has become somewhat frequent.
I have attached my web shield settings.. for soliciting recommendations.

Thanks.

 

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36631
Re: URL: Blacklist notification
« Reply #5 on: February 13, 2019, 04:35:05 PM »
you can check suspicious URLs here:

File and URL (blacklist)  check  https://www.virustotal.com/
Website check  https://sitecheck.sucuri.net/


If you suscpect false positives then see my post here on how to report
https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438



Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 83018
  • No support PMs thanks
Re: URL: Blacklist notification
« Reply #6 on: February 13, 2019, 04:56:34 PM »
VirusTotal isn't very good for URL checking as it doesn't actually do a scan, but refers to blacklists. 

It is possible that the "infected with URL:Blacklist" could also be caused by an attempt to access a 3rd party URL from that site.
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 1909 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.2.2401 (build 20.2.5130.570) UI-1.0.505/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5412
  • Spartan Warrior
Re: URL: Blacklist notification
« Reply #7 on: February 14, 2019, 03:37:02 AM »
Sucuri also does blacklist checks but also checks for other things:  https://sitecheck.sucuri.net/results/https/www.locusinn.com

Seems [h]ttps://www.locusinn.com not configured correctly.  http://urlquery.net/report/74c504ba-1673-48d5-9732-b7def7da2389, i.e. insecure connection.
Windows 10 Home 64-bit 1909 Avast Premier Security version 20.1.2397 (build 20.1.5069.559) UI version 1.0.460.

Offline Fabi12

  • Newbie
  • *
  • Posts: 1
Re: URL: Blacklist notification
« Reply #8 on: February 24, 2020, 10:03:35 PM »
Hello, I've had the same problem for a long time, around half a year.
But, My url is not the same. My url is bbtbfr.pw
"We've safely abortd connection on bbtbfr.pw because it was infected with URL:Blackist.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 43564
  • 60 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: URL: Blacklist notification
« Reply #9 on: February 24, 2020, 10:29:19 PM »
Hello, I've had the same problem for a long time, around half a year.
But, My url is not the same. My url is bbtbfr.pw
"We've safely abortd connection on bbtbfr.pw because it was infected with URL:Blackist.
Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1909 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.3.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 64673
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: URL: Blacklist notification
« Reply #10 on: February 25, 2020, 06:25:18 AM »
Win 8.1 [x64] - Avast PremSec 20.4.2408.B#3 [UI.520] - CC 5.65 - EEK - FF ESR 68.8 [NS/AOS/uBO/PB] - TB 68.8.1 - ASB/ACP/ASL.BC
Deutschsprachiger Bereich -> Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6768
  • volunteer
Re: URL: Blacklist notification
« Reply #11 on: February 27, 2020, 03:19:34 AM »
Hi,
Heres the full string:
"Weve safely aborted connection on wxw.locusinn.com because it was infected with URL:Blacklist"

I am merely posing this as an example .. this kind of intervention has become somewhat frequent.
I have attached my web shield settings.. for soliciting recommendations.

Thanks.

Detection was removed in 26.02.2020 at 06:21 AM

Quote from: Avast
Our virus specialists have now cleared its reputation in our database.

With URLs this change should be instant, but it might take up to 24 hours with files.

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6768
  • volunteer
Re: URL: Blacklist notification
« Reply #12 on: February 27, 2020, 03:49:12 AM »
Hello, I've had the same problem for a long time, around half a year.
But, My url is not the same. My url is bbtbfr.pw
"We've safely abortd connection on bbtbfr.pw because it was infected with URL:Blackist.

It is not a false positive. 

Quote from: Avast
Our virus specialists have been working on this problem and they informed me that this detection is correct. This is most likely caused by a browser hijacker.

Offline begalund

  • Newbie
  • *
  • Posts: 1
Re: URL: Blacklist notification
« Reply #13 on: March 12, 2020, 11:54:12 PM »
It is nice that this isn't a false positive, but avast isn't removing the threat completely, it just keeps jumping and then reappearing.  I've had it pop up about 30-35 times today (at least) even though I get the "threat secured" message, it will just reappear 5-10 minutes later.  I don't have my web browser open, it just pops back up. 

I'd love to just kill it and not worry about it, rather than have the harsh warning dings every 10 minutes warning me about the threat - even when I'm not using the machine, it's just sitting idle.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 83018
  • No support PMs thanks
Re: URL: Blacklist notification
« Reply #14 on: March 13, 2020, 01:25:34 AM »
It is nice that this isn't a false positive, but avast isn't removing the threat completely, it just keeps jumping and then reappearing.  I've had it pop up about 30-35 times today (at least) even though I get the "threat secured" message, it will just reappear 5-10 minutes later.  I don't have my web browser open, it just pops back up. 

I'd love to just kill it and not worry about it, rather than have the harsh warning dings every 10 minutes warning me about the threat - even when I'm not using the machine, it's just sitting idle.

Well it looks like you could have an underlying problem (but without details, tough to suggest anything), something is trying to connect to something considered a blacklisted URL and avast is preventing the connection to that URL.  What the problem is finding what is trying to make that connection.

Attaching a screenshot of the avast alert window might help and opening the See Details option may indicate what was trying to make that connection.

Without details we just can't say what the cause is. 
It may well be best to start your own new topic on this (possibly in the viruses and worms sub-forum) and we will try to help.
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 1909 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.2.2401 (build 20.2.5130.570) UI-1.0.505/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro