Author Topic: "Malicious URL Detected" -- Is this an advertising ploy by Avast?  (Read 11174 times)

0 Members and 1 Guest are viewing this topic.

Offline Styler

  • Newbie
  • *
  • Posts: 14
I keep getting this big red box popping up on my computer, every 60 seconds or so, or every time I change pages or go to a new website.  The voice also screams "Threat Detected".  I have just, within the last few days, re-registered for the 2nd year of free Avast.  I have run the update.  I have run a Quickscan twice, a full scan twice, and also run a quickscan and a full scan of Ad-Aware.  All to no avail.  When I ran the first full scan of Avast, some objects were found.  When I tried to quarantine them, it wasn't clear whether or not anything happened.  I wasn't able to do anything further after attempting to choose this option.  With Ad-Aware, they found some items, and removed them.  The next time I ran both softwares, nothing was found.  Still -- I get this message.  Total time spent yesterday trying to fix this problem -- 7 hours.  Total work done -- none.  I own a commercial digital photo lab with a full-time tech.  I am not a pro, but he is.  I had him spend part of his day yesterday trying to fix this.  He can find nothing wrong.  Every time this message pops up, I am offered the option of getting further information.  When I try to do this I am directed, not to a site where this info is shown, but to a site which pressures me to buy Avast's $29.95 upgrade.  I now think that this "threat" is a cynical ploy on the part of Avast to get me to buy their upgrade.  If this is true, I will promptly unload this software, and go back to the despised Norton.  At least they are upfront with their relentless pressure. WHAT IS GOING ON??

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67269
Re: "Malicious URL Detected" -- Is this an advertising ploy by Avast?
« Reply #1 on: April 16, 2011, 05:06:56 PM »
Which is the URL detected? (please, post a dead link like hxxp or add spaces to it).
avast does not force you to upgrade. You can be probably being redirected to a fake site.
The best things in life are free.

Offline Dieselman

  • Poster
  • *
  • Posts: 621
Re: "Malicious URL Detected" -- Is this an advertising ploy by Avast?
« Reply #2 on: April 16, 2011, 05:12:08 PM »
Download rkill first. Then download Malwarebytes and run a scan.

http://www.bleepingcomputer.com/download/anti-virus/rkill

http://www.malwarebytes.org/

Offline Para-Noid

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 6713
  • Trust only what you test yourself!
Re: "Malicious URL Detected" -- Is this an advertising ploy by Avast?
« Reply #3 on: April 16, 2011, 05:20:23 PM »
1) Get rid of Ad-Aware. Running two av's at a time causes conflicts.
2) Uninstall any old versions of avast. See  http://files.avast.com/files/eng/aswclear.exe (run for each version). Don't forget to re-boot.
3) Install 6.0.1044 http://forum.avast.com/index.php?topic=74515.msg617340#msg617340
4) Hope this helps.  
Also provide us with info concerning any and all other security software you are using or have ever used in the past. And if uninstalled, how was it uninstalled.  :)
Dell Inspiron, Win10x64--HP Envy Win10x64--Both systems Avast Free v17.9.2322, Comodo Firewall v8.2 w/D+, MalwareBytes v3.0, OpenDNS, Super Anti-Spyware, Spyware Blaster, MCShield, Unchecky, Vivaldi Browser and, various browser security tools.

"Look before you leap!" Use online scanners before you click on any link.

Offline Styler

  • Newbie
  • *
  • Posts: 14
Re: "Malicious URL Detected" -- Is this an advertising ploy by Avast?
« Reply #4 on: April 16, 2011, 05:40:10 PM »
I installed Ad-Aware AFTER all this started with Avast, so it's not the problem.  I've also run a registry DX software, and "Malabytes".  I've had Avast for over a year now, and my original Norton was removed by my tech.  I've had NO problems with Avast until after I re-registered.  I just ran yet another full scan of Avast, and NO threats were detected.  STILL I get the screaming red box.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40632
  • Dragons by Sasha
    • Malware fixes
Re: "Malicious URL Detected" -- Is this an advertising ploy by Avast?
« Reply #5 on: April 16, 2011, 05:44:41 PM »
What sites and are your virus definitions up to date -

Are you getting redirected form the site you expect ?

Offline Styler

  • Newbie
  • *
  • Posts: 14
Re: "Malicious URL Detected" -- Is this an advertising ploy by Avast?
« Reply #6 on: April 16, 2011, 05:49:05 PM »
I'm sorry -- I don't understand what you are asking me for either of these questions.  You mean what sites on the web?  Dozens -- Huffington Post, for one, and some IRS government sites.  Also, the State Board of Equalization.  All sites that I would assume are heavily policed.  As for the other question -- I really don't know what you want to know.

Offline Para-Noid

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 6713
  • Trust only what you test yourself!
Re: "Malicious URL Detected" -- Is this an advertising ploy by Avast?
« Reply #7 on: April 16, 2011, 05:50:40 PM »
I installed Ad-Aware AFTER all this started with Avast, so it's not the problem.  I've also run a registry DX software, and "Malabytes".  I've had Avast for over a year now, and my original Norton was removed by my tech.  I've had NO problems with Avast until after I re-registered.  I just ran yet another full scan of Avast, and NO threats were detected.  STILL I get the screaming red box.
With all due respect. I would still get rid of Ad-Aware to prevent any possible conflicts. Running more than one active av at a time is asking for trouble.  :)
Dell Inspiron, Win10x64--HP Envy Win10x64--Both systems Avast Free v17.9.2322, Comodo Firewall v8.2 w/D+, MalwareBytes v3.0, OpenDNS, Super Anti-Spyware, Spyware Blaster, MCShield, Unchecky, Vivaldi Browser and, various browser security tools.

"Look before you leap!" Use online scanners before you click on any link.

Offline Para-Noid

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 6713
  • Trust only what you test yourself!
Re: "Malicious URL Detected" -- Is this an advertising ploy by Avast?
« Reply #8 on: April 16, 2011, 05:52:28 PM »
I'm sorry -- I don't understand what you are asking me for either of these questions.  You mean what sites on the web?  Dozens -- Huffington Post, for one, and some IRS government sites.  Also, the State Board of Equalization.  All sites that I would assume are heavily policed.  As for the other question -- I really don't know what you want to know.
What sites are you visiting when you get redirected?  ???
Dell Inspiron, Win10x64--HP Envy Win10x64--Both systems Avast Free v17.9.2322, Comodo Firewall v8.2 w/D+, MalwareBytes v3.0, OpenDNS, Super Anti-Spyware, Spyware Blaster, MCShield, Unchecky, Vivaldi Browser and, various browser security tools.

"Look before you leap!" Use online scanners before you click on any link.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40632
  • Dragons by Sasha
    • Malware fixes
Re: "Malicious URL Detected" -- Is this an advertising ploy by Avast?
« Reply #9 on: April 16, 2011, 05:53:16 PM »
OK first are your virus definitions up to date as there was a false positive on HTML files a few days ago
Current is 110415-1

What is the alert that Avast produces - could you take a screens shot or state which file/ip address is responsible

Then

Download OTS to your Desktop and double-click on it to run it
  • Make sure you close all other programs and don't use the PC while the scan runs.
  • Select All Users
  • Under additional scans select the following
Reg - Disabled MS Config Items
Reg - Drivers32
Reg - NetSvcs
Reg - SafeBoot Minimal
Reg - Shell Spawning
Evnt - EventViewer Logs (Last 10 Errors)
File - Lop Check

  • Under the Custom Scan box paste this in
netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
%systemroot%\*. /mp /s
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
CREATERESTOREPOINT

  • Now click the Run Scan button on the toolbar. Make sure not to use the PC while the program is running or it will freeze.
  • When the scan is complete Notepad will open with the report file loaded in it.
  • Please attach the log in your next post.

Offline Styler

  • Newbie
  • *
  • Posts: 14
Re: "Malicious URL Detected" -- Is this an advertising ploy by Avast?
« Reply #10 on: April 16, 2011, 05:54:10 PM »
And with all due respect to you, as well, this does not in any way address my concerns.  The original problem existed before the Ad-Aware, and has not changed in any way since.  It would make just as much sense to delete the Avast.

Offline Styler

  • Newbie
  • *
  • Posts: 14
Re: "Malicious URL Detected" -- Is this an advertising ploy by Avast?
« Reply #11 on: April 16, 2011, 05:56:47 PM »
I am not on ANY other websites when I get redirected.  I am directed from the Avast scan itself!  I do the scan, and there is an option to get further information on the scan results.  I choose this option (from the Avast website itself) and get sent to the advertising site.

Offline Styler

  • Newbie
  • *
  • Posts: 14
Re: "Malicious URL Detected" -- Is this an advertising ploy by Avast?
« Reply #12 on: April 16, 2011, 06:03:23 PM »
Reply to the person who asked about my updates:  everything has been updated as of late last night, and was done multiple times yesterday.  As I said in my original post -- my tech and I spent 7 hours yesterday trying to get rid of this.  He has an arsenal of professional tools that I can't even begin to list.  He has worked for me for 7 years, and has been solicited 3 different times by HP (for whom we do beta testing) to work for them.  He is a pro.  When he says there is nothing to remove, I believe him.  We have our own FTP sites for our customers, and constantly monitor our systems for problems.  He says the message is coming from the Avast site, and I believe him.

Offline Pondus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 35944
Re: "Malicious URL Detected" -- Is this an advertising ploy by Avast?
« Reply #13 on: April 16, 2011, 06:09:41 PM »
Reply to the person who asked about my updates:  everything has been updated as of late last night, and was done multiple times yesterday.  As I said in my original post -- my tech and I spent 7 hours yesterday trying to get rid of this.  He has an arsenal of professional tools that I can't even begin to list.  He has worked for me for 7 years, and has been solicited 3 different times by HP (for whom we do beta testing) to work for them.  He is a pro.  When he says there is nothing to remove, I believe him.  We have our own FTP sites for our customers, and constantly monitor our systems for problems.  He says the message is coming from the Avast site, and I believe him.
Essexboy is a pro Malware remover if anyone in here can find out what and fix it then it is him
so follow his advice
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline Zile

  • Newbie
  • *
  • Posts: 18
Re: "Malicious URL Detected" -- Is this an advertising ploy by Avast?
« Reply #14 on: April 16, 2011, 06:12:22 PM »
I get this pop up 2 times, why?



« Last Edit: April 16, 2011, 06:18:26 PM by Zile »