Author Topic: Another blocked site, possible FP?  (Read 10593 times)

0 Members and 1 Guest are viewing this topic.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Another blocked site, possible FP?
« Reply #15 on: July 11, 2010, 02:54:09 AM »
I have no idea why Pondus didn't get an alert based on the fact he didn't give any information, browser and any security add-ons. etc.

Hopefully he will enlighten us, if he can.
It seemed he was also surprised about the fact...!?
Have a nice sunday,
asyn
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

bo.elam

  • Guest
Re: Another blocked site, possible FP?
« Reply #16 on: July 11, 2010, 04:16:56 AM »
I also get the alert.
Bo

CharleyO

  • Guest
Re: Another blocked site, possible FP?
« Reply #17 on: July 11, 2010, 07:17:13 AM »
***

Opera warning of illegal characters in image 1

Online Linkscan says it is infected in image 2

Click images to enlarge.


***

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89117
  • No support PMs thanks
Re: Another blocked site, possible FP?
« Reply #18 on: July 11, 2010, 02:58:38 PM »
Yes the illegal characters will no doubt be those in the autorun script shown in my image 3 (http://forum.avast.com/index.php?topic=61666.msg521282#msg521282). When will people realise that script examples of malware shouldn't be posted as text but as images to avoid such detections.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
Re: Another blocked site, possible FP?
« Reply #19 on: July 11, 2010, 03:43:03 PM »
Hi forum friends,

There is not much progression here as we have treated this online danger here:
http://forum.avast.com/index.php?topic=40014.0
How long before this becomes properly addressed by MS, and not only for their latest OS W7?
But probably they are more concerned about validating pirated versions than making their OS more secure?

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89117
  • No support PMs thanks
Re: Another blocked site, possible FP?
« Reply #20 on: July 11, 2010, 04:34:07 PM »
This is hardly the same as this detection is about malware code posted on a web site forum as an example being detected as the real thing, which would normally be detected on a USB stick (which is what your link is to, a USB infection).
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

saluqi

  • Guest
Re: Another blocked site, possible FP?
« Reply #21 on: July 12, 2010, 01:07:22 AM »
Putting the offending script quote in a CODE box solved the problem, at least for me.  Does anybody still get a warning for that page now?

The problem message was, of course, posted by someone seeking help, not by AumHa staff.

Thanks for clarification!

John

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89117
  • No support PMs thanks
Re: Another blocked site, possible FP?
« Reply #22 on: July 12, 2010, 01:24:13 AM »
Thanks for the feedback.

Even putting the script in a code tag may not work as effectively avast will be looking at the raw data of that page. That is why I always use images to display suspect/exploit code, etc. However, placing it in a Code box has resolved this particular alert.

Yes isn't that always the case someone seeking help posting the sample code, than it is up to the experienced  aumha staff/moderators to watch out for malicious code examples being posted, as (PA Bear) has done in this case.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security