RedirME? avast wasn't behave like this before

Viruses and worms
1

What is this when I click into malware website that is on the google search page that the google redirection is blocked instead of the actual site? This change is kind of nonsense. :frowning: :frowning: :frowning: Earlier it is even weird that the first result is blocked immediately if it is malware website!
Look at this
hxxp://www.google.com.hk/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&ved=0CB0QFjAA&url=http%3A%2F%2Fa.4399.cn%2F&ei=NborVMfsE4aD8gWWuYGoAQ&usg=AFQjCNEQPs12GzETa7D2mVcdbbCzApP_Qw|{gzip}
HTML:RedirME-inf [trj]
This makes some of the scan result in virustotal not accurate. I save html file by right click → save as on the link, which avast doesn’t give a detection of the actual malware that exist on the site.

PS: That remind me of the issue how baidu search redirection script is being blocked immediately when a search key is entered and the result is suspicious.

2

Dear rickyyeung,

This is not avast!'s doing, this is a redirection warning from Google Safebrowsing

Notice for redirection The page you are on, is trying to send you to. Htxp://a.4399.cn/

If you do not want to visit that page, you can return to the previous page.


This new functionality was recently being brought to Google Chrome and firefox as far as I am aware.

Here you can see what happens without this intervention: http://linkeddata.informatik.hu-berlin.de/uridbg/index.php?url=www.google.com.hk%2Furl%3Fsa%3Dt%26rct%3Dj%26q%3D%26esrc%3Ds%26source%3Dweb%26cd%3D1%26ved%3D0CB0QFjAA%26url%3Dhttp%253A%252F%252Fa.4399.cn%252F%26ei%3DNborVMfsE4aD8gWWuYGoAQ%26usg%3DAFQjCNEQPs12GzETa7D2mVcdbbCzApP_Qw|{gzip}&useragentheader=&acceptheader=

polonus

3

4399.cn < malware site.

https://forum.avast.com/index.php?topic=53253.0