can't login due to Avast finding threats in various files

Avast Free Antivirus / Premium Security
1

Hello everyone. I searched the forum for similar problems but couldn’t find any so I’m starting this thread.

I have recently starting having issues with trying to login to nfsunlimited.net and I know the site is safe. I can’t login using the site’s standard login, nor can I use the Facebook and Yahoo login they have avaliable.

Here is one MAL threat it picks up:

http://forum.nfsunlimited.net/images/smilies/icon_lol.gif

and the process it associates with this is located in this directory:

C:\Windows\assembly\NativeImages_v2.0.50727_32

however, I go to check that directory and it doesn’t exist. FWIW, the file is supposed to be system.ni.dll

Also, the actual message Avast gives in this instance is “Malicious URL Blocked” and it is the Network Shield that is picking this up.

I have the Free Avast 7.0.1474 and I am running Windows 7 Ultimate 64-bit Service Pack 1 with an i7 920 and 9GB of memory.

I hope I didn’t forget anything. Oh yes, it doesn’t appear to be browser specific as I’ve tried Internet Explorer, Firefox, Safari, and Goggle Chrome. They all exhibit the exact same behavior. I’ve also scanned the system drive and it doesn’t show anything.

–Wesley

2

I’m already analyzing and return with results

3

URL:mal means it is on a block list…for whatever reason?

if you think this is wrong, you can report it here. http://www.avast.com/contact-form.php
you may add a link to this topic in case they reply…

4

this is really a false positive

https://www.virustotal.com/url/e018e146e18915bf9b1ea96ef16157266c3001a550ab1600d83eada95f5b5b1e/analysis/1360443429/

http://www.urlvoid.com/scan/forum.nfsunlimited.net/

http://sitecheck.sucuri.net/results/forum.nfsunlimited.net/images/smilies/icon_lol.gif

http://zulu.zscaler.com/submission/show/898e61dc642e06e9ed32b6c230ce99fc-1360443493

http://www.mywot.com/en/scorecard/forum.nfsunlimited.net

http://vscan.novirusthanks.org/analysis/cd591c48a8e5d036e44d43d686b48757/aWNvbi1sb2wtZ2lm/

http://urlquery.net/report.php?id=970605

http://wepawet.iseclab.org/view.php?hash=f02c6c6a17e513787ba81739208f1ddc&t=1360444130&type=js

Reporting to analysts

5

CLEAN MX says it’s a malware site.

https://www.virustotal.com/url/e018e146e18915bf9b1ea96ef16157266c3001a550ab1600d83eada95f5b5b1e/analysis/1360459528/

Edit: NOW says…

6

Thank you guys for all the replies. Honestly, I appreciate the time spent.

I started getting around this by shutting down the Network Shield for 10 minutes so I can login but its not an ideal workaround. I will report at the link Pondus provided.

The admin at nfsunlimited and the rest of the moderators there are good guys. They do not run a malware site. I’ve been going there for over two years now and have never had an infection or any other issue.

Thanks again and I hope I can return the favor one day. Oh yes, thanks for that list of sites Jefferson. I had a couple but most of those are new to me. I was too lazy to do the homework, to be honest. Thanks.

–Wesley

7
The admin at nfsunlimited and the rest of the moderators there are good guys.[b] They do not run a malware site[/b].
most dont......but there is something called hacking ;)

lots of info about this here if interested http://blog.sucuri.net/

Top Ten Web Hacking Techniques of 2012
http://blog.whitehatsec.com/top-ten-web-hacking-techniques-of-2012/

8

Hello,
URL will be unblocked.

Thank Milos.

9

I thought your name was Jefferson ??? When did you become Milos ???
The link to that information would have been appropriate or, a quote would also have worked .

10

My name is Jefferson reporting to analysts Sirmer, Jindrich Kubec,
Milos Responsible for Requesting Unlock the Url
Sometimes automated analysis is not going to detect some things, Which is why us malware analyst must dig deeper and analyze the code by hand. After you have attempted direct analysis
I get confirmation if the url is unlocked or not. :wink:

11
Which is why us malware analyst must dig deeper
Can you provide some credentials to back up the claim of "Malware analyst" ??? Such as those shown by people like: essexboy, jeffce, etc ???