elective-stereophonic
elective-stereophonic
Avast detects malware int Nxt address
singapore
Please login or register.

Login with username, password and session length
Advanced search  

News:

Latest Stable Nxt Client: Nxt 1.12.2

Pages: [1] 2  All

Author Topic: Avast detects malware int Nxt address  (Read 11237 times)

DoM P

  • Hero Member
  • *****
  • Karma: +114/-147
  • Offline Offline
  • Posts: 1115
    • View Profile
    • Crypto Finance Analysis Consulting
Avast detects malware int Nxt address
« on: January 14, 2015, 08:54:54 am »

Windows 7, Avast Premier

Here's the alert:


WTF?

Edit: Forgot so say it was upon the launch of the Windows client...
« Last Edit: January 14, 2015, 09:29:52 am by DoM P »
Logged
Have you heard of CryptoCoins? You should!
Crypto Finance Analysis Consulting: cfa-consulting.ch
Nxt : NXT-LP8G-9NHV-VUQB-58ZZF

LiQio

  • Hero Member
  • *****
  • Karma: +50/-5
  • Offline Offline
  • Posts: 672
    • View Profile
    • NxtLoader for Windows
Re: Avast detects malware int Nxt address
« Reply #1 on: January 14, 2015, 09:09:18 am »

Does Avast lookup IP-blacklists?

Darkhorse

  • Hero Member
  • *****
  • Karma: +61/-8
  • Offline Offline
  • Posts: 1016
  • Keep It Simple
    • View Profile
Re: Avast detects malware int Nxt address
« Reply #2 on: January 14, 2015, 09:10:28 am »

Hxxp?
Logged
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬  ▄▀▀▀▀▀▀▀▀▄  ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬●  nimirum  ●▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬ ◖ENDING CENSHORSIP ONLINE◗  ◖ ICO OPEN NOW◗ ▬▬▬

DoM P

  • Hero Member
  • *****
  • Karma: +114/-147
  • Offline Offline
  • Posts: 1115
    • View Profile
    • Crypto Finance Analysis Consulting
Re: Avast detects malware int Nxt address
« Reply #3 on: January 14, 2015, 09:24:59 am »

Does Avast lookup IP-blacklists?
I am unsure that would be the problem: It's the network agent that did that, not the web agent.


Hxxp?
I suppose "x" stands for a wildcard character.
Logged
Have you heard of CryptoCoins? You should!
Crypto Finance Analysis Consulting: cfa-consulting.ch
Nxt : NXT-LP8G-9NHV-VUQB-58ZZF

LiQio

  • Hero Member
  • *****
  • Karma: +50/-5
  • Offline Offline
  • Posts: 672
    • View Profile
    • NxtLoader for Windows
Re: Avast detects malware int Nxt address
« Reply #4 on: January 14, 2015, 09:33:21 am »

Does Avast lookup IP-blacklists?
I am unsure that would be the problem: It's the network agent that did that, not the web agent.

OK, don't know about which component does what, but a quick lookup told me that the IP is listed in some blacklist directories:
http://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a178.162.198.109&run=toolpage

(Has probably nothing to do with the current owner/nxter but vps-server/ip was used for spam activity or the like using this ip at some time)

costa2439

  • Full Member
  • ***
  • Karma: +5/-0
  • Offline Offline
  • Posts: 109
    • View Profile
Re: Avast detects malware int Nxt address
« Reply #5 on: January 14, 2015, 09:59:50 am »

I have the same error when mining
Logged

starfishi

  • Hero Member
  • *****
  • Karma: +88/-142
  • Offline Offline
  • Posts: 503
    • View Profile
Re: Avast detects malware int Nxt address
« Reply #6 on: January 14, 2015, 10:32:56 am »

I have avast complaining, blocking, when i start the java (run.bat) process for supernet 1.4.7.1.


     http:// bug.airdns.org:7874/nxt

     Infection:   URL: Mal


What is "bug.airdns".  i don´t exactly like the word "bug", also . .  :)


Logged

SwissAlps

  • Hero Member
  • *****
  • Karma: +31/-16
  • Offline Offline
  • Posts: 519
    • View Profile
    • NxtTracker.com
Re: Avast detects malware int Nxt address
« Reply #7 on: January 14, 2015, 10:43:21 am »

Same problem as DoM P, same IP   http://178.162.198.109:7874/nxt
Logged
CryptoNanoPay project
Note that the "Barter Point" test has just started...

Darkhorse

  • Hero Member
  • *****
  • Karma: +61/-8
  • Offline Offline
  • Posts: 1016
  • Keep It Simple
    • View Profile
Re: Avast detects malware int Nxt address
« Reply #8 on: January 14, 2015, 11:05:15 am »

i got the same notification. "threat has been detected" for that site. What site is it actually?
Logged
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬  ▄▀▀▀▀▀▀▀▀▄  ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬●  nimirum  ●▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬ ◖ENDING CENSHORSIP ONLINE◗  ◖ ICO OPEN NOW◗ ▬▬▬

LiQio

  • Hero Member
  • *****
  • Karma: +50/-5
  • Offline Offline
  • Posts: 672
    • View Profile
    • NxtLoader for Windows
Re: Avast detects malware int Nxt address
« Reply #9 on: January 14, 2015, 11:07:27 am »

bug.airdns.org and 178.162.198.109 is the same.

@Darkhorse: Are you also running Avast?

Darkhorse

  • Hero Member
  • *****
  • Karma: +61/-8
  • Offline Offline
  • Posts: 1016
  • Keep It Simple
    • View Profile
Re: Avast detects malware int Nxt address
« Reply #10 on: January 14, 2015, 11:12:45 am »

bug.airdns.org and 178.162.198.109 is the same.

@Darkhorse: Are you also running Avast?

Yeap Avast
Logged
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬  ▄▀▀▀▀▀▀▀▀▄  ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬●  nimirum  ●▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬ ◖ENDING CENSHORSIP ONLINE◗  ◖ ICO OPEN NOW◗ ▬▬▬

LiQio

  • Hero Member
  • *****
  • Karma: +50/-5
  • Offline Offline
  • Posts: 672
    • View Profile
    • NxtLoader for Windows
Re: Avast detects malware int Nxt address
« Reply #11 on: January 14, 2015, 11:15:10 am »

Okay, so my guess is it's still an ip-blacklist issue.

The "owner" of the VPS should check and try to have it de-listed from http://mailspike.org/

Anybody know who the owner is?

DoM P

  • Hero Member
  • *****
  • Karma: +114/-147
  • Offline Offline
  • Posts: 1115
    • View Profile
    • Crypto Finance Analysis Consulting
Re: Avast detects malware int Nxt address
« Reply #12 on: January 14, 2015, 11:21:02 am »

Okay, so my guess is it's still an ip-blacklist issue.

The "owner" of the VPS should check and try to have it de-listed from http://mailspike.org/

Anybody know who the owner is?
It appears on testnet, and in the change log
Maybe JL?

https://bitcointalk.org/index.php?topic=345619.41400
http://wiki.nxtcrypto.org/wiki/Nxt_Software_Change_Log

It's hosted on Amazon
Logged
Have you heard of CryptoCoins? You should!
Crypto Finance Analysis Consulting: cfa-consulting.ch
Nxt : NXT-LP8G-9NHV-VUQB-58ZZF

LiQio

  • Hero Member
  • *****
  • Karma: +50/-5
  • Offline Offline
  • Posts: 672
    • View Profile
    • NxtLoader for Windows
Re: Avast detects malware int Nxt address
« Reply #13 on: January 14, 2015, 11:23:45 am »

^ DoM P you're right, could be JL

Edit: removed line already posted by DoM P
Edit 2: will PM JL
« Last Edit: January 14, 2015, 11:26:02 am by LiQio »
Logged

Jean-Luc

  • Core Dev
  • Hero Member
  • *****
  • Karma: +816/-81
  • Offline Offline
  • Posts: 1610
    • View Profile
Re: Avast detects malware int Nxt address
« Reply #14 on: January 15, 2015, 02:05:52 pm »

This is not a VPS, it is a VPN exit IP, shared by multiple users. Just like a tor exit node, it can happen that at some time somebody is abusing it to send spam or malware. It is only port 7874 that points to a Nxt peer node.
Logged
GPG key fingerprint: 263A 9EB0 29CF C77A 3D06  FD13 811D 6940 E1E4 240C
NXT-X4LF-9A4G-WN9Z-2R322

DoM P

  • Hero Member
  • *****
  • Karma: +114/-147
  • Offline Offline
  • Posts: 1115
    • View Profile
    • Crypto Finance Analysis Consulting
Re: Avast detects malware int Nxt address
« Reply #15 on: January 15, 2015, 02:15:29 pm »

This is not a VPS, it is a VPN exit IP, shared by multiple users. Just like a tor exit node, it can happen that at some time somebody is abusing it to send spam or malware. It is only port 7874 that points to a Nxt peer node.

When this pops up on my screen, it's OK: I'm an expert at computers.

But if this happens to a newbie, it sounds really bad.

The link malware alert while using Nxt client = Nxt is malware will quickly be made, imo.

Is there a way to fix this?
Logged
Have you heard of CryptoCoins? You should!
Crypto Finance Analysis Consulting: cfa-consulting.ch
Nxt : NXT-LP8G-9NHV-VUQB-58ZZF

capodieci

  • Hero Member
  • *****
  • Karma: +256/-19
  • Offline Offline
  • Posts: 1356
  • BlockchainZoo.com
    • View Profile
    • ZooBC - Advancing Blockchain Technology
Re: Avast detects malware int Nxt address
« Reply #16 on: February 24, 2015, 04:55:10 am »

This is not a VPS, it is a VPN exit IP, shared by multiple users. Just like a tor exit node, it can happen that at some time somebody is abusing it to send spam or malware. It is only port 7874 that points to a Nxt peer node.

When this pops up on my screen, it's OK: I'm an expert at computers.

But if this happens to a newbie, it sounds really bad.

The link malware alert while using Nxt client = Nxt is malware will quickly be made, imo.

Is there a way to fix this?

This just did happen to a friend that I just introduced to Nxt and in fact came in as a concern (even to me). I told him that in the peer list such node can be blacklisted for safety, but yes, quite annoying. I believe there is nothing that can be done, unless the client check in with the antivirus before linking to a peer :)

https://nxtforum.org/general-discussion/virus-in-the-peers
Logged
- Decentralised Business Network: DeBuNe -
Will be implemented on
ZooBC.com - Join the forum ZooBC.org - By Blockchain Zoo

yassin54

  • Hero Member
  • *****
  • Karma: +240/-14
  • Offline Offline
  • Posts: 2503
  • I am Homer, Sorry my english is Bad!!
    • View Profile
Re: Avast detects malware int Nxt address
« Reply #17 on: February 24, 2015, 08:53:14 am »

This is not a VPS, it is a VPN exit IP, shared by multiple users. Just like a tor exit node, it can happen that at some time somebody is abusing it to send spam or malware. It is only port 7874 that points to a Nxt peer node.

When this pops up on my screen, it's OK: I'm an expert at computers.

But if this happens to a newbie, it sounds really bad.

The link malware alert while using Nxt client = Nxt is malware will quickly be made, imo.

Is there a way to fix this?

This just did happen to a friend that I just introduced to Nxt and in fact came in as a concern (even to me). I told him that in the peer list such node can be blacklisted for safety, but yes, quite annoying. I believe there is nothing that can be done, unless the client check in with the antivirus before linking to a peer :)

https://nxtforum.org/general-discussion/virus-in-the-peers
Me too, i have this message
I am agree, "But if this happens to a newbie, it sounds really bad"

Jean-Luc

  • Core Dev
  • Hero Member
  • *****
  • Karma: +816/-81
  • Offline Offline
  • Posts: 1610
    • View Profile
Re: Avast detects malware int Nxt address
« Reply #18 on: February 24, 2015, 10:00:55 am »

I told him that in the peer list such node can be blacklisted for safety, but yes, quite annoying. I believe there is nothing that can be done, unless the client check in with the antivirus before linking to a peer :)
Blacklisting is a bad idea. The opposite should be done, whitelist that peer URL in the antivirus and report it as a false positive.
Logged
GPG key fingerprint: 263A 9EB0 29CF C77A 3D06  FD13 811D 6940 E1E4 240C
NXT-X4LF-9A4G-WN9Z-2R322

capodieci

  • Hero Member
  • *****
  • Karma: +256/-19
  • Offline Offline
  • Posts: 1356
  • BlockchainZoo.com
    • View Profile
    • ZooBC - Advancing Blockchain Technology
Re: Avast detects malware int Nxt address
« Reply #19 on: February 24, 2015, 10:20:46 am »

I told him that in the peer list such node can be blacklisted for safety, but yes, quite annoying. I believe there is nothing that can be done, unless the client check in with the antivirus before linking to a peer :)
Blacklisting is a bad idea. The opposite should be done, whitelist that peer URL in the antivirus and report it as a false positive.

Well, this is something we all can do here, but unless you put an alert message explaining this on the NRS, and hoping people believe it, how do people that just go to nxt.org and download the client know that it is a false positive and do as you suggest?

Under a marketing point of view an antivirus telling a user nxt=malware is not a good advertising

Just my 0.05 NXT on this...

Rob
Logged
- Decentralised Business Network: DeBuNe -
Will be implemented on
ZooBC.com - Join the forum ZooBC.org - By Blockchain Zoo
Pages: [1] 2  All
 

elective-stereophonic
elective-stereophonic
assembly
assembly