Author Topic: ww25.agedporntube.com  (Read 8963 times)

0 Members and 1 Guest are viewing this topic.

Offline veselin32

  • Newbie
  • *
  • Posts: 8
ww25.agedporntube.com
« on: July 17, 2020, 09:51:47 AM »
Please help
Every few minutes my Avast premium security is annoying with messagge:

Threat secured
We've safely aborted connection on ww25.agedporntube.com because it was infected with URL:Blacklist.

Scan says no viruses at all. I found this app in common files, CryptwareTech, but no way to remove it.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89228
  • No support PMs thanks
Re: ww25.agedporntube.com
« Reply #1 on: July 17, 2020, 11:48:04 AM »
As I mentioned in your other topic, you need to run the tools and attach the logs in this new topic before anyone can begin to help you they need this information.

This is usually an indication of an underlying infection (hidden or undetected) and avast is preventing it from calling home, etc.

-  This needs further analysis by a malware removal specialist:
Go to this topic https://forum.avast.com/index.php?topic=194892.0 for information on Logs to assist in cleaning malware. <snip>


Use the information about getting and using the tools and attach the logs here, not in the LOGS topic.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline veselin32

  • Newbie
  • *
  • Posts: 8
Re: ww25.agedporntube.com
« Reply #2 on: July 17, 2020, 12:11:01 PM »
OK, sorry, I am newbie here. This is a log after Malwarebytes scaning.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89228
  • No support PMs thanks
Re: ww25.agedporntube.com
« Reply #3 on: July 17, 2020, 12:17:40 PM »
No problem, continue with the other scans and attach the FRST logs (FRST.txt and Additions.txt).
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33926
  • malware fighter
Re: ww25.agedporntube.com
« Reply #4 on: July 17, 2020, 12:57:31 PM »
Problem connection to site is insecure, no connection over https.
Then the openresty server has a disputed URI parameters access restriction bypass exploit.

Website is also ABP whitelisted for a.o.
Quote
/wXw.google dot com/adsense/domains/caf.js";DD.onerror=function(){if(azx.search!=='?z'){azx.href='/?z';}};DD.onload=DD.onreadystatechange=function(){if(!aAC&&LU){if(!window['googleNDT_']){}
LU(google dot ads dot domains dot Caf);}  etc.

polonus
« Last Edit: July 17, 2020, 04:02:03 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline veselin32

  • Newbie
  • *
  • Posts: 8
Re: ww25.agedporntube.com
« Reply #5 on: July 17, 2020, 03:14:46 PM »
Two more logs.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89228
  • No support PMs thanks
Re: ww25.agedporntube.com
« Reply #6 on: July 17, 2020, 03:36:34 PM »
Two more logs.

Only one logs attached, no Additions.txt file attached.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline veselin32

  • Newbie
  • *
  • Posts: 8
Re: ww25.agedporntube.com
« Reply #7 on: July 17, 2020, 05:05:51 PM »
Now,sorry. Addition.txt

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89228
  • No support PMs thanks
Re: ww25.agedporntube.com
« Reply #8 on: July 17, 2020, 05:39:40 PM »
There may be some delay due to differing time zones and availability of the volunteer malware removal specialists.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline veselin32

  • Newbie
  • *
  • Posts: 8
Re: ww25.agedporntube.com
« Reply #9 on: July 17, 2020, 06:36:09 PM »
New log after lot of healing and cleaning. After MalwareBytes asked to restart computer, it was not possible, windows was stucked, I had to make complete power off. After that, was booting normaly.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89228
  • No support PMs thanks
Re: ww25.agedporntube.com
« Reply #10 on: July 17, 2020, 10:20:50 PM »
Not sure what you meant by healing and cleaning as the FRST application is an analysis tool, only when a malware removal specialist analyses it and creates a fix only then does it do anything.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline veselin32

  • Newbie
  • *
  • Posts: 8
Re: ww25.agedporntube.com
« Reply #11 on: July 17, 2020, 10:58:58 PM »
I ran avast again, cc cleaner and malwarebytes, that I mean cleaning.