Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: BrentLouie on September 25, 2012, 08:42:21 AM

Title: Allow Sites That Avast Disallows
Post by: BrentLouie on September 25, 2012, 08:42:21 AM
How do I allow a site that Avast has blocked? Keep in mind that this is not the fault of Site Blocker - my site blocker is not active.

Avast apparently found some "malware" on some website which was probably a false positive. I looked at the hosts file and Avast did not modify it. The site blocking is done through some other method and does not go away when I close Avast. Is this really Avast's fault?

Anyway, does anyone know how I could unblock the site? Thanks you very much for reading.
Title: Re: Allow Sites That Avast Disallows
Post by: Pondus on September 25, 2012, 08:51:56 AM
what is the URL ?
Title: Re: Allow Sites That Avast Disallows
Post by: BrentLouie on September 25, 2012, 08:53:35 AM
It is:

http://carrotlord.hostzi.com/c/index.php

which is a forum I run on my own website.
Title: Re: Allow Sites That Avast Disallows
Post by: Pondus on September 25, 2012, 08:55:35 AM
and what does avast say.....can you attach a screenshot of the avast popup warning ?
Title: Re: Allow Sites That Avast Disallows
Post by: BrentLouie on September 25, 2012, 08:59:34 AM
It basically looks like this:

(http://tinyurl.com/9cl25e6)

That's not the actual warning I got but it looks pretty similar to that.
After the red warning box floated up once, it never showed up again. Now whenever I visit the site, my browser just says "Connection has been closed" or something. Happens with every browser.
Title: Re: Allow Sites That Avast Disallows
Post by: Pondus on September 25, 2012, 09:00:48 AM
Sucuri 
http://sitecheck.sucuri.net/results/carrotlord.hostzi.com/c/index.php

zulu analyser
http://zulu.zscaler.com/submission/show/5ba448a3545ee86879e6bf17799dc1dc-1348556217

URLVoid - also see the domain listed at the bottom
http://www.urlvoid.com/scan/carrotlord.hostzi.com/

urlquery - alerts from Suricata /w Emerging Threats filter
http://urlquery.net/report.php?id=197963


Title: Re: Allow Sites That Avast Disallows
Post by: Pondus on September 25, 2012, 09:05:35 AM
Quote
That's not the actual warning I got but it looks pretty similar to that.
well we know what a avast warning looks like, but we need to see the exact one....as it is the info on it that is interesting
Title: Re: Allow Sites That Avast Disallows
Post by: BrentLouie on September 25, 2012, 09:12:49 AM
Sucuri 
http://sitecheck.sucuri.net/results/carrotlord.hostzi.com/c/index.php

zulu analyser
http://zulu.zscaler.com/submission/show/5ba448a3545ee86879e6bf17799dc1dc-1348556217

URLVoid - also see the domain listed at the bottom
http://www.urlvoid.com/scan/carrotlord.hostzi.com/

urlquery - alerts from Suricata /w Emerging Threats filter
http://urlquery.net/report.php?id=197963

That is absolutely not right. If you look at the source code for http://carrotlord.hostzi.com/c/index.php you will notice that there is no JavaScript except at the very bottom which is automatically added by the hosting site. Also, the only PHP code just creates simple table entries. That's it! No malware!

I don't have the original warning message. Sorry about that.
Title: Re: Allow Sites That Avast Disallows
Post by: Pondus on September 25, 2012, 11:48:18 AM
if the avast warning is similar to the one you posted....it does not say malware
it say URL:mal. meaning the url is on a block list
Title: Re: Allow Sites That Avast Disallows
Post by: CharleyO on September 26, 2012, 03:08:22 AM
***

I might be wrong but ......

The javascript is below the HTML tag at the bottom of the source code and that is probably causing the alarm.

Your host should know better than that.


***
Title: Re: Allow Sites That Avast Disallows
Post by: BrentLouie on September 26, 2012, 08:41:42 PM
Ok I uninstalled Avast and reinstalled it, and now it seems fixed.