Network threat with Avast Premium

system · 2017-02-09T12:27:29.000Z

Hi there, here’s hoping someone can answer my query. I’ve been using Avast Premium for a while now with Vista Home Premium. I know Vista is no longer supported but I haven’t had any issues till now so I’m hoping it’s just an error that can be corrected and not a sign that i can no longer use Avast with my computer.

3 weeks ago Avast flagged up a Network threat, my router was shown as “Your device is working okay” but highlighted red and when looking at the error it mentions that there is a fake DNS on my device sending me to sites that might not be who they say they are. The 2 addresses mentioned are:

malwarebytes.org ???
#####blist.amazonaws.com :-\ (the # were a bunch of random numbers that i don’t remember)

Since then I have been through ipconfig and checked everything and flushed the dns cache, checked the Hosts file which is default, setup a static ip with 8.8.8.8 and 8.8.4.4 as the primary and secondary DNS’s, installed and re-installed the newest version of Avast and been sent a new up-to-date router by BT, a Home hub 4 and I’m still getting the same error. Anyone have any ideas? :-\

Inel Core 2 quad, Vista HP sp 2 up-to-date, 4gb, 160gb etc.

P.S. I’m also getting a another error that happened around the same time. Every time i do a Smart Scan it gets to 67% and then Malwarebytes flags an Outbound ip called popcash.net but this probably isn’t related as there are no outbound rules in the firewall and when doing a full scan with Mbam it finds nothing.

Pondus · 2017-02-09T12:34:05.000Z

P.S. I'm also getting a another error that happened around the same time. Every time i do a Smart Scan it gets to 67% and then Malwarebytes flags an Outbound ip called popcash.net but this probably isn't related as there are no outbound rules in the firewall and when doing a full scan with Mbam it finds nothing.

https://virustotal.com/en/url/c741eb923723ee21aa50819622cb934d2756efc3aeb6a2a031c54d1a4b715488/analysis/1486643534/

Web site category Dr.Web >> known infection source/not recommended site Websense ThreatSeeker >> advertisements

IP history >> https://virustotal.com/en/ip-address/54.89.40.86/information/

Check your router here >> https://www.f-secure.com/en/web/labs_global/router-checker

system · 2017-02-14T14:21:05.000Z

Hi there, and thanks for replying. I understand Popcash.net is related to some sort of virus but I have been unable to find any traces of it in the computer. I have scanned it with ever virus/malware and adware program known to man and none of them find anything wrong. The only time I get a red flag is when Avast is scanning. Once it reaches exactly 67%, Malwarebytes flags an outbound rule. But when you search for this rule, it doesn’t exist. Would there be a reason why Avast doesn’t find it or is it something Avast is triggering while scanning?

I’ve also checked the router with the program you suggested, and as I said I had it replaced with a new 1. But I’m also still receiving the DNS error while using the Avast network scanner. But BOTH routers couldn’t be affected, unless Avast is flagging 1 of the servers BT uses by accident. Anyone else have a thought about this? Any help would be appreciated! Cheers.

Pondus · 2017-02-14T16:02:42.000Z

The only time I get a red flag is when Avast is scanning.

What type of avast scan are you doing?

Wonder if it has something do do with avast DNS check …

Announcements