Clean site in blacklist avast

[Vadim_S]

Hello,

My site hxtp://kvnbest.ru is in the avast black list. This site has been tested and does not contain viruses.

http://www.unmaskparasites.com/security-report/?page=kvnbest.ru

https://www.virustotal.com/url/771c5bf773b5fb4396df67334d8e84499c0381c890c67051ed8f5854defd3d3f/analysis/

Please help to exclude a site from the black list.

[MAG]

If you're certain it's clean you can report as false positive:
http://www.avast.com/contact-form.php?loadStyles

[Pondus]

And what does avast say?......a screenshot of the warning may help

urlquery give a ISD alert
 http://urlquery.net/report.php?id=623232

[polonus]

Hi Pondus.

I think this is IP related because of a long overdue  JS/Blacole.O detection on an url domain for that IP ->: http://wepawet.iseclab.org/view.php?type=js&hash=20ecd55b3af07a78b06d65d0326b2b0b & ->
https://www.virustotal.com/file/6a640db20a52065b54de054e9af728c381f04d733a552fedcaec37ebd8411b2c/analysis/ 
Malware alive and active since: 2012-08-06 12:00:59      status: OVERDUE!     Overdue! active for over 3681.1 hrs. (data from VirusWatch):
Re: http://urlquery.net/queued.php?id=8050508. For the Suricata&Snort IDS alerts there, see: -> this link on GMane from Balasubramaniam Natarajan : http://comments.gmane.org/gmane.comp.security.ids.snort.emerging-sigs/17692 (commented Oct 1st 2012 by Matt Jonkman  for EmergingThreats pro Snort ruleset)

polonus

[Vadim_S]

And what does avast say?

IE:

After Stopping Network Shield (Yandex Browser):

[polonus]

Also get this firekeeper IDS-alert for that site, details: === Triggered rule ===
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://web.archive.org/"; reference:url,www.malwarepatrol.net; fid:350030; rev:20130107135342;)

=== Request URL ===
http://web.archive.org/web/*/kvnbest.ru

see: http://urlquery.net/report.php?id=630304 (IDS flag for exploit kit's filemagic macromedia flash exploit

polonus

[Milos]

Hello,
it should be fixed from yesterday.

Milos

[Vadim_S]

Thank you all! My site was removed from the blacklist.