gobeck Posted November 21, 2009 ID:160740 Share Posted November 21, 2009 Is this site a false positive? The website is http://www.imageonglass.co.uk and appears to be OK.Thanks, Art Link to post Share on other sites More sharing options...
SpySentinel Posted November 22, 2009 ID:161114 Share Posted November 22, 2009 Hi gobeck,The IP 195.88.190.247 is on an IP range (195.88.190.) that is linked to over 158 malicious websites. Link to post Share on other sites More sharing options...
MysteryFCM Posted November 22, 2009 ID:161198 Share Posted November 22, 2009 The IP referenced, is on a range that is well known for nothing but malicious content;http://hphosts.blogspot.com/2009/10/crimew...ss-as49093.html Link to post Share on other sites More sharing options...
Marcus Posted November 22, 2009 ID:161202 Share Posted November 22, 2009 Interesting to note that Avast!'s "Network Shield" module also blocks that entire range and is very quick to do so too. Link to post Share on other sites More sharing options...
MysteryFCM Posted November 22, 2009 ID:161204 Share Posted November 22, 2009 Ooooh, interesting ...... I didn't know Avast had the capability (knew they detected malicious content at the domain level, but that's about it). I'll have to re-check that when I get some time Link to post Share on other sites More sharing options...
MysteryFCM Posted November 22, 2009 ID:161206 Share Posted November 22, 2009 I've disabled the link in the first post by the way, as it loads an exploit (see line #107 of the sites source code) via;prerre.com/counter3.php Link to post Share on other sites More sharing options...
Marcus Posted November 23, 2009 ID:161211 Share Posted November 23, 2009 Ooooh, interesting ...... I didn't know Avast had the capability (knew they detected malicious content at the domain level, but that's about it). I'll have to re-check that when I get some time Hi Steve,I'd be interested in your findings and opinions on that and how it compares with MBAM's IP blocking. The interesting thing was that Avast!'s blocking was immediate; MBAM hadn't reacted at that point. When I repeated the attempt to access with the "Network Shield" temporarily disabled MBAM's IP blocker cut in (as it should, of course) after a few seconds delay with no objection (conflicts, error messages etc) coming from Avast!I've had this experience once or twice before and have never seen a conflict between the two. Currently I have both the IP blocker on and that particular module of Avast! Professional (the "Network Shield") also on, ie running in realtime and there is no conflict that I can see. I haven't set any exclusions at all in Avast! either. Hope that helps a little. Link to post Share on other sites More sharing options...
MysteryFCM Posted November 23, 2009 ID:161214 Share Posted November 23, 2009 I'll look into it when I get time and report back As an addendum, the domain the OP mentioned, is hosted by PlusNet, who just happen to be my ISP too, so I've fired off a note to them to let them know another customers site has been compromised. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now