Hello,
i just went to google, youtube and yahoo today and then this Message showed up a couple of times:
Object: hxxp://xx.xxx.xxx.xxx/adsrv/locateService
Infektion URL:Mal
Process: C:\Program Files (x86)Alwil Software\Avast5\AvastSvc.exe
I found no Infection with Avast or MalwareBytes. This Ip isnt mine.
What is this? Am i in trouble?
No not at all i confirm u are clean avast has prevented u from getting infected by blocking infected pages…
edit the link u gave to hxxp and make it not clickable please.
but why shows this Message up, even if i never try to get to this site? i dont even know what this is or why it gets blocked, when i am on any site… like this forum
can anybody tell me what this link is about?
It is to an ad server and there is a possibility of malicious ads having been served up from this location in the past. The strange thing, this ad server IP address is on the same domain name batch as your ISP.
The fact that it shows the avastSvc.exe is because the browser you used goes through the avast web shield proxy.
What browser are you using ?
I would say that you should enable ad blocking or install an ad blocking add-on/extension.
This is the suspicious code there:
-navigationshilfe.t-online.de/dnserror?url=http:/62.157.140.133/ suspicious
[suspicious:2] (ipaddr:217.6.165.51) (frame) -navigationshilfe.t-online.de/dnserror?url=http:/62.157.140.133/
Found to be suspicious here: http://urlquery.net/report.php?id=14179
This was the malware that once was launched from there:
http://www.xandora.net/xangui/malware/view/7d638bb916653fe7caed0b3736a6c629
This was in the past attack details on Joebox:
Start time: 14:33:51
Start date: 15/03/2011
Overall analysis duration: 0h 8m 34s
Target binary file name: 789865.exe
Target script file name: bulkxp.jbs
polonus
im using chrome,
dont really get polonus report, what tells it?
I get a similar message when Iuse Yahoo as my search engine. I have moved to Google which is annoying to say the least. I spent lots of time on the phone to Avast who say there is no problem but I know there is. The following is my original post and the reply from another user with a similar problem. I would like to get in touch with Avast but this is not possible.
I am annoyed about this as I loathe Google and want Yahoo back. I shall not renew my Avast subscription as a result.
Re: Mal. URL 'blocked' on respectable site. Or what?
« Reply #3 on: Today at 05:53:45 PM » Quote Modify
Since 23 December when I’ve used Yahoo Search Engine I have received a Mal URL Blocked message from Avast. The company cannot solve this problem and I am absolutely lost and worried. Can anyone help with this please?
Report to moderator 95.150.15.225
phoenicks
Newbie
Offline
Posts 1
Re: Yahoo Search Engine prompts MAL UEL Blocked with Avast
« Reply #1 on: Yesterday at 07:31:36 PM » Quote
Yes, I get this too. I moved to Chrome over the Xmas hols and now EVERY Yahoo search is blocked by Avast. It doesn’t do it with IE8. It just means that I use Google as a search engine instead. Annoying, as my email is with Yahoo & it’s my start up home page.
Is the commonality here the fact that the warning is restricted to one browser only ?