I recently formatted and fresh installed w8.1x64 with AIS pro. I mostly use Firefox as browser. However recently Avast started to show popup alert about an infection that doesn’t make sense. It happens even when I am not actively browsing any webpage at all and only gmail and fb pages are opened.
The prefix of the url changes but the domain looks same (I think) : something like http:// pmpzz[.]download[.]adsservingtwig[.]xyz/?sov=23314… (a long series of strings) [Screenshot Attached]
I’m also using Firefox as default browser and I’m getting annoying avast pop-ups linked to these sites: 54.186.138.97 and http://54.186.138.97:443/v2/links/view
I scanned these links on virustotal.org, they seem to be clean, but the question is: are they false-positve pop-ups?
Guys having similar problem, as per the forum rules, please open your own thread. On a separate note, to get help make sure you followed the instruction here: https://forum.avast.com/index.php?topic=53253.0
Though I have doubt how much help we might get since I followed as exactly it says yet no help arrived, yet.
Anybody please?
Same problem here: when launching Firefox 34.0 (last) I get annoying avast pop-ups linked to these sites: 54.186.138.97 and http://54.186.138.97:443/v2/links/view. Hope it’s a false positive… :
Probably some Ad company hosting their Ads on this shared IP with others that host malware. Ad serving companies that do this need to be publicly shamed.
People with the specific IP, I think I had the same problem when tried Firefox Sync. I think mine was an IP associated with firefox but the certificate was expired or something. I stopped at that time and tried couple days later and it was ok. Though not quite sure about this specific IP, you might check the who is dns and etc. to be sure. And if you are using ff sync. I stopped using Xmark couple months back since it started freezing but it all good now. Just my two cents
Still no rescue from the experienced one regarding my Infection: URL:Mal problem.
For those with this IP issue, it should now be unblocked see:
@ Vestro
The malware removal specialists are volunteers and at this time of year are a little thin on the ground. I will try and attract some attention to the topic.
