Author Topic: Avast blocking access to legitimate website?  (Read 4642 times)

0 Members and 1 Guest are viewing this topic.

Offline wsalvatore

  • Newbie
  • *
  • Posts: 3
Avast blocking access to legitimate website?
« on: November 16, 2010, 01:58:48 AM »
How can I find out why avast is blocking access to a specific website? It's a clean site, no scripting activex, etc. No scams, etc but I have to disable avast to to get to the site or it's blocked.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67274
Re: Avast blocking access to legitimate website?
« Reply #1 on: November 16, 2010, 02:05:49 AM »
Can you post the edited link to it? hxxp:\\...
Generally, avast detection is accurate in these cases.
Isn't it an encrypted/obfuscated script or iframe?
Wasn't the site hacked?
Maybe you could contact its webmaster.

Check here how to clean and make a website secure.

Quote
The vast majority of malware today is distributed over the web, mostly by means of hacked (otherwise legitimate) sites. The attacker usually injects malicious some scripts into some (or all) pages on the site, waiting for an unsuspecting user to visit the site and possible infect his/her machine.

And this is where avast’s detection capabilities really excel. Its abilities to detect these web-based malicious scripts are second to none, and thanks to the Web Shield and Script Blocking providers, they are used exactly when needed, doing an excellent job stopping the web-based malware right on the entry point.
The best things in life are free.

Offline wsalvatore

  • Newbie
  • *
  • Posts: 3
Re: Avast blocking access to legitimate website?
« Reply #2 on: November 16, 2010, 02:15:40 AM »
The site is sweetbinks.org. It's an animal rescue site. No iframes, scripts, etc. I know the webmaster and have tried to help them find out why the site is blocked, I have an entire copy of the site(it's not very large) and it's pretty basic html.
I have examined all pages and can find nothing out of the ordinary, no scripts, hidden code, etc. Since the site belongs to a charity, it's a seriouse matter for them to have it blocked. If I load the site on my own server, avast does not detect a thing when I go there so it appears it's the domain name itself that it does not like.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 84109
  • No support PMs thanks
Re: Avast blocking access to legitimate website?
« Reply #3 on: November 16, 2010, 02:54:09 AM »
I don't think it is avast blocking sweetbinks.org as the site is redirecting to rirabbits.org and it is that site which is being blocked, see image.

I have checked out the rirabbits.org http://vscan.urlvoid.com/analysis/dd52d4cab8d1768efdd776d6b76cf98b/aW5kZXg=/ and it isn't on any lists of malicious sites, so I will report this for further analysis.
« Last Edit: November 16, 2010, 03:14:51 AM by DavidR »
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.9.2437 (build 20.9.5758.0) UI-1.0.579/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Naean

  • Jr. Member
  • **
  • Posts: 41
    • Nez Tech
Re: Avast blocking access to legitimate website?
« Reply #4 on: November 16, 2010, 03:14:24 AM »
Looks like this website has been hacked, as avast! reports that one of its pages, rirabbits.org/Adopt_Us/Application/application.html, has been infected with a HTML:REdirBA-inf Trojan Horse. (See screenshot below.)

« Last Edit: November 16, 2010, 03:18:44 AM by Naean »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 84109
  • No support PMs thanks
Re: Avast blocking access to legitimate website?
« Reply #5 on: November 16, 2010, 03:16:14 AM »
Strange I didn't get a web shield alert on the rirabbits.org site, mind you I was only on the home page and didn't go rummaging round it.
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.9.2437 (build 20.9.5758.0) UI-1.0.579/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 84109
  • No support PMs thanks
Re: Avast blocking access to legitimate website?
« Reply #6 on: November 16, 2010, 03:26:03 AM »
I have just had a look at the source for that page, rirabbits.org/Adopt_Us/Application/application.html and didn't see anything obvious regarding any redirection.
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.9.2437 (build 20.9.5758.0) UI-1.0.579/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Charyb

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2313
Re: Avast blocking access to legitimate website?
« Reply #7 on: November 16, 2010, 03:43:29 AM »
David, I had the webshield show redirect too. Then two more attempts network shield blocked.

hxxp://webcache.googleusercontent.com/search?q=cache:sXubz9YqOfAJ:sweetbinks.org/+sweetbinks.org&cd=1&hl=en&ct=clnk&gl=us|>{gzip} [L] HTML:RedirBA-inf [Trj] (0)

Offline wsalvatore

  • Newbie
  • *
  • Posts: 3
Re: Avast blocking access to legitimate website?
« Reply #8 on: November 16, 2010, 09:00:23 PM »
The form on that page redirects to hxxps://no7-control.superb.net:8443/webserver/webeasy/webeasy.php, but that is simply the form submittal utility from the webhost. Could that be what is being seen as a trojan?