Author Topic: help! malicious site is trying to gain acces. should i worry?  (Read 4508 times)

0 Members and 1 Guest are viewing this topic.

badboy28895

  • Guest
hello. for the past few days my avast home edition has been notifying me of a malicious website trying to gain acces and it is blocking it. This occurs a minute or so after connecting to the internet with aol service.
this has never happend before and i have been using avast for a few years now. this thing is trying to gain acces, i am not browsing any page or anything it just does it on its own. avast will show 2 messages within minutes of each other after connecting, and then some hours later it will show one  and then an hour later it will show the other. I would like some help in figuring out what this is  and if i should worry about it. What can i do to prevent this. what site is this why is it trying to gain acces? please any help would greatly be appreciated.
here is what the avast log says.

22.07.2009  14:45:00  Network Shield: blocked access to malicious site htxp://88.80.7.152/cgi/joxnc.php?ixnc=4x4x<x5x4x6=x [ C:\Program Files\AOL 9.0\waol.exe ( 1012 ) ]
22.07.2009  14:47:15  Network Shield: blocked access to malicious site 88.80.7.152/cgi/yotziiii.php?ii=1<67<62x6444=6x<x5x4x6=x [ C:\Program Files\Internet Explorer\iexplore.exe ( 3016 ) ]
22.07.2009  15:20:51  Network Shield: blocked access to malicious site htxp://88.80.7.152/cgi/shxmcs.php?xncsx=4x4x<x5x4x6=x [ C:\Program Files\AOL 9.0\waol.exe ( 2652 ) ]
22.07.2009  15:28:47  Network Shield: blocked access to malicious site 88.80.7.152/cgi/bqw.php?kapfv=1<67<62x6444=6x<x5x4x6=x [ C:\Program Files\Internet Explorer\iexplore.exe ( 1580 ) ]
22.07.2009  17:24:49  Network Shield: blocked access to malicious site htxp://88.80.7.152/cgi/indmmmmm.php?mm=4x4x<x5x4x6=x [ C:\Program Files\AOL 9.0\waol.exe ( 2652 ) ]
22.07.2009  17:32:31  Network Shield: blocked access to malicious site 88.80.7.152/cgi/ttjjy.php?oo=1<67<62x6444=6x<x5x4x6=x [ C:\Program Files\Internet Explorer\iexplore.exe ( 1580 ) ]
22.07.2009  19:29:25  Network Shield: blocked access to malicious site htxp://88.80.7.152/cgi/jzpuk.php?ttttt=4x4x<x5x4x6=x [ C:\Program Files\AOL 9.0\waol.exe ( 2652 ) ]
22.07.2009  19:44:58  Network Shield: blocked access to malicious site 88.80.7.152/cgi/bqgwl.php?gap=1<67<62x6444=6x<x5x4x6=x [ C:\Program Files\Internet Explorer\IEXPLORE.EXE ( 2624 ) ]
22.07.2009  20:37:11  Network Shield: blocked access to malicious site 88.80.7.152/cgi/vvv.php?lll=1<67<62x6444=6x<x5x4x6=x [ C:\Program Files\Internet Explorer\IEXPLORE.EXE ( 2560 ) ]

i tried to type in the site in a browser to see what this site was, but avast detected it as a trj. here is what it says.

7/22/2009 10:39:37 AM   SYSTEM   1368   Sign of "JS:ScriptPE-inf [Trj]" has been found in "htxp://search.mywebsearch.com/mywebsearch/AJmain.jhtml?searchfor=+http%3A%2F%2F88.80.7.152%2Fcgi%2Feukz.php%3Fuzjjj%3D4x4x%3Cx5x4x6%3Dx+&ptnrS=GRman000&st=bar\{gzip}" file. 

can anyone tell me how to get rid of this and if this is harmful and how can it affect me or my computer.
thank you.

one other thing...when i try to click on avast log viewer, it does not open for some reason. i clik it over and over and it wont open.

i have scanned my pc with a boot scan and while logged in and connected to internet and avast did not find any viruses.

 

Offline mathboyx215

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 449
Re: help! malicious site is trying to gain acces. should i worry?
« Reply #1 on: July 23, 2009, 06:22:57 AM »
Hi.Please download malwarebytes http://filehippo.com/download_malwarebytes_anti_malware/
Update it and run a full scan.If it finds any infected item,quarantine it and post back a log.
It is not possible to divide anything by zero

Offline Tarq57

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3695
  • If at first you don’t succeed; call it version 1.0
Re: help! malicious site is trying to gain acces. should i worry?
« Reply #2 on: July 23, 2009, 07:47:01 AM »
Agree with using MBAM. Good demand scanner.

What toolbars have you installed? This is classic adware behaviour, as indicated by the reference to "mywebsearch".
Windows 10,Windows Firewall,Firefox w/Adblock.

John2009

  • Guest
Re: help! malicious site is trying to gain acces. should i worry?
« Reply #3 on: July 23, 2009, 08:56:50 AM »
mywebsearch is basic malware adware, get rid of it.