Author Topic: Avast detecting my website as malware  (Read 2506 times)

Offline mouath

  • Newbie
  • *
  • Posts: 10
    • Personal Message (Offline)
Avast detecting my website as malware
« on: August 07, 2012, 04:39:52 PM »
vast is detecting my website is being malware infected, but doesn't specify any other details. Avast 2 days ago updated its list and this is causing the error. I checked my website on many sites and no malware is detected. What could be the reason for that? and how can I identify the problem so i can fix it.

attached are screen shots of warning we get, but there is no detail of the type of malware, just url:mal

I opened Ticket ID:    PDN-718424 to track it also

your help is greatly appreciated

Offline mouath

  • Newbie
  • *
  • Posts: 10
    • Personal Message (Offline)
Re: Avast detecting my website as malware
« Reply #1 on: August 07, 2012, 04:40:53 PM »
all these sites didn't find anything and said it was clean

1. https://www.virustotal.com
2. http://www.google.com/
3. http://www.urlvoid.com/
4. http://sitecheck.sucuri.net/

Online Pondus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 21712
  • Gender: Male
    • Personal Message (Online)
Re: Avast detecting my website as malware
« Reply #2 on: August 07, 2012, 04:50:53 PM »
And what is your website URL ?

Can you attach a screenshot of the avast warning?
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline mouath

  • Newbie
  • *
  • Posts: 10
    • Personal Message (Offline)
Re: Avast detecting my website as malware
« Reply #3 on: August 07, 2012, 04:58:26 PM »

Offline mouath

  • Newbie
  • *
  • Posts: 10
    • Personal Message (Offline)
Re: Avast detecting my website as malware
« Reply #4 on: August 07, 2012, 06:09:24 PM »
any ideas?

Offline DavidR

  • avast! Überevangelist
  • Certainly Bot
  • *****
  • Posts: 69214
  • Gender: Male
  • No support PMs thanks
    • Personal Message (Offline)
Re: Avast detecting my website as malware
« Reply #5 on: August 07, 2012, 06:13:56 PM »
It would have been handy if you had posted the URLs of the analysis pages. But we will proceed with the assumption that these sites found nothing.

There is an on-line contact form, http://www.avast.com/contact-form.php?loadStyles for:  * Sales inquiries; Technical issues; Website issues; Report false virus alert in file; Report false virus alert on website; Undetected Malware; Press (Media), issues.

- If you are reporting an FP, then you get another input field open, click Browse button and navigate to the file or enter the web URL for the site you wish to submit for review (network shield), etc. A link to this topic also wouldn't hurt.
Core2Duo E8300/ 4GB Ram/ WinXP ProSP3/ avast! free 2014 9.0.2018/ Outpost Firewall Pro9.1/ Firefox 28.0, NoScript, RequestPolicy/ MailWasher Pro/ DropMyRights/ MalwareBytes AntiMalware Premium 2.0.1/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security


Offline mouath

  • Newbie
  • *
  • Posts: 10
    • Personal Message (Offline)
Re: Avast detecting my website as malware
« Reply #7 on: August 07, 2012, 07:19:06 PM »
i just submitted a false alarm ticket too

Online Pondus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 21712
  • Gender: Male
    • Personal Message (Online)
Re: Avast detecting my website as malware
« Reply #8 on: August 07, 2012, 07:29:19 PM »
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline mouath

  • Newbie
  • *
  • Posts: 10
    • Personal Message (Offline)
Re: Avast detecting my website as malware
« Reply #9 on: August 07, 2012, 07:50:41 PM »
thats not malware, its green.

whats a suspicious domain name alert?It didn't make sense to me

Online Pondus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 21712
  • Gender: Male
    • Personal Message (Online)
Re: Avast detecting my website as malware
« Reply #10 on: August 07, 2012, 07:52:36 PM »
you need to scroll down..... to the yellow arrow
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline polonus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 20145
  • Gender: Male
  • malware fighter
    • Personal Message (Offline)
Re: Avast detecting my website as malware
« Reply #11 on: August 07, 2012, 07:55:09 PM »
Hi Pondus,

Here it is given as secure: http://www.mbi-connexion.com/securite/diagnostic/2--2mcctv.com
But I saw this issue:
suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
wXw.mongoosemetrics.com/jsfiles/js-correlation/ benign
[nothing detected] (script) wXw.mongoosemetrics.com/jsfiles/js-correlation/
     status: (referer=wXw.mongoosemetrics.com/jsfiles/js-correlation/mm-control.php
Found up here: http://xss.cx/2012/01/10/ghdb/xss-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report-01.html
injected  ////getvar.js' type='text/javascript'etc"////

polonus
« Last Edit: August 07, 2012, 08:01:13 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline mouath

  • Newbie
  • *
  • Posts: 10
    • Personal Message (Offline)
Re: Avast detecting my website as malware
« Reply #12 on: August 07, 2012, 09:12:05 PM »
Thats not the problem, just for testing I removed it moongoose script from my side and still didn't do anything Avast still complained as being malware

Offline polonus

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 20145
  • Gender: Male
  • malware fighter
    • Personal Message (Offline)
Re: Avast detecting my website as malware
« Reply #13 on: August 07, 2012, 09:17:09 PM »
Hi mouath,

I did not say there is an infection, but that script sure has XSS flaws as I showed from the link I provided.
The blocking should be reconsidered by the avast analysts, and they should remove it.
So wait for a coming update, as there was a malware domain block (now given as green where I last saw it)
and I do not know if that has been lifted yet,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline mouath

  • Newbie
  • *
  • Posts: 10
    • Personal Message (Offline)
Re: Avast detecting my website as malware
« Reply #14 on: August 07, 2012, 09:39:59 PM »
ooh okay great

thanks for your feedback, great input

 

Google Chrome

AVAST recommends using the FREE Google Chrome™ browser.

Download Google Chrome Now