Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

ATTENTION ADMINISTRATION!!!


  • Please log in to reply
39 replies to this topic

#1 Norseman143

Norseman143

  • Members
  • 300 posts
  • OFFLINE
  •  
  • Local time:07:27 AM

Posted 22 December 2015 - 08:14 PM

I was in your"General Security" forum reading about Bit locker ect

 

Twice my Anti Virus popped up saying there is malware and Avast and fire Fox stopped it

The second time it knocked me off of BC

 

It occurred when I went to new pages when I was reading about Bit locker

 

Sorry if posting this here broke some rule, but thought you should know

 

Go ahead and delete this, if you want


Edited by hamluis, 22 December 2015 - 08:38 PM.
Moved from Win 10 Support to Gen Security - Hamluis.


BC AdBot (Login to Remove)

 


#2 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,661 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:27 AM

Posted 22 December 2015 - 08:19 PM

Mind giving the URL to the thread/page you were on? I'll check it out but I doubt there was anything malicious on it.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#3 Norseman143

Norseman143
  • Topic Starter

  • Members
  • 300 posts
  • OFFLINE
  •  
  • Local time:07:27 AM

Posted 22 December 2015 - 08:35 PM

Crypto Wall 4.0 Help Your Files Ransomware  Support Topic page 2

 

I had to copy it from History, because when I click on it, I get knocked off it right away



#4 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,661 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:27 AM

Posted 22 December 2015 - 08:35 PM

Are you able to give us a screenshot of the error message in Firefox or your Antivirus?

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#5 Norseman143

Norseman143
  • Topic Starter

  • Members
  • 300 posts
  • OFFLINE
  •  
  • Local time:07:27 AM

Posted 22 December 2015 - 08:42 PM

No, It wont let me on the page at all, Fire fox takes me to a blank page

 

I was reading the thread from the beginning,trying to decide if I should download a program

 

The first message I got was on a different thread. That one the avast thing popped up and stopped it

 

I will look and see if I can find it again



#6 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,661 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:27 AM

Posted 22 December 2015 - 08:45 PM

Avast should log alerts in the protection logs, so I would take a look there and copy/paste the event message here so we can get more information. Usually, Antivirus alerts can be triggered on pages like that when there's resources loaded from a host marked as malicious by the Antivirus, like a picture hosted on a site that is blacklisted. This is probably what happened. I don't think actual linked URLs that don't get loaded (example if I type Google.com) gets flagged.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#7 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,471 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:27 AM

Posted 22 December 2015 - 09:06 PM

CryptoWall 4.0: Help_Your_Files Ransomware Support Topic page 2 only...or other pages in that topic as well?
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#8 Norseman143

Norseman143
  • Topic Starter

  • Members
  • 300 posts
  • OFFLINE
  •  
  • Local time:07:27 AM

Posted 22 December 2015 - 09:17 PM

There was another page I was on where just the Avast pop up and said it blocked Malware, which I am having a hard time finding because I was on so many pages

 

I didnt pay much attention on that one , but the 2nd one, all the Bells and whistles from Avast and Firefox went off and kicked me off the page

 

I still cant get on that page

 

Aura, I did try and find some kind of log in Avast but couldnt figure out how to do it. I got some algorythem things and not much useful information

 

I guess if its not a big deal, go ahead and delete this thread. I just thought I should report it, especially if its on BC

 

Just so you guys know, My AV hardly ever goes off. I can go months without getting a pop up



#9 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,471 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:27 AM

Posted 22 December 2015 - 09:17 PM

Virus Total anlaysis of page 2 shows clean.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#10 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,661 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:27 AM

Posted 22 December 2015 - 09:23 PM

I can see a few things triggering an alert in avast! and Firefox.

Post #24 which lists malicious hosts: http://www.bleepingcomputer.com/forums/t/595215/cryptowall-40-help-your-files-ransomware-support-topic/page-2#entry3855325
Post #25 which contains malicious JavaScript code (even though it's not dynamic, it could set off avast!): http://www.bleepingcomputer.com/forums/t/595215/cryptowall-40-help-your-files-ransomware-support-topic/page-2#entry3855345
Post #30 which lists more malicious hosts: http://www.bleepingcomputer.com/forums/t/595215/cryptowall-40-help-your-files-ransomware-support-topic/page-2#entry3855369

OR, it could be PresComm blog, which is flagged by one Antivirus on VirusTotal: https://www.virustotal.com/fr/url/380573f71fc9e9f956f5e7821fb675efab1c949d8df37bf0ecb2c28ad20f89f2/analysis/1450837378/
Even though it's not avast, it could be it. Try to go on his blog, see if Firefox hangs or avast! pop-up.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#11 Norseman143

Norseman143
  • Topic Starter

  • Members
  • 300 posts
  • OFFLINE
  •  
  • Local time:07:27 AM

Posted 22 December 2015 - 09:25 PM

Well I cant figure it out. I go on the Windows 10 forum almost every day and have read a lot of different threads over the Months and havent ever had my anti virus

programs go off

 

Avast, and whatever Firfox has built into it is all I am using

 

 

I will check some other pages in that thread to see if I get another hit. It doesnt happen on page one



#12 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,471 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:27 AM

Posted 22 December 2015 - 09:25 PM

Some of the pages in that support topic contain posting information about the infection itself...avast is most likely detecting something related to that.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#13 Norseman143

Norseman143
  • Topic Starter

  • Members
  • 300 posts
  • OFFLINE
  •  
  • Local time:07:27 AM

Posted 22 December 2015 - 09:28 PM

Well there you go! I was starting to think I was turning into a anti virus Nut Job

 

I clicked on all your links and it wont load the pages, just like on page 2



#14 Norseman143

Norseman143
  • Topic Starter

  • Members
  • 300 posts
  • OFFLINE
  •  
  • Local time:07:27 AM

Posted 22 December 2015 - 09:30 PM

Ouitman

 

Has anyone else who uses Avast had this problem,to your knowledge?



#15 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,661 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:27 AM

Posted 22 December 2015 - 09:31 PM

Well my links points back to Page 2, hence why they do not work. The question here is: what exactly on Page 2 is triggering that. Here's the posts quoted.

Edit: Post quotes removed due to triggering avast alerts.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users