Author Topic: Infection:URL:Mal, please help!!!  (Read 4589 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Infection:URL:Mal, please help!!!
« on: December 12, 2012, 06:15:18 PM »
Hi, I have a problem where my avast is going crazy telling me,and my website has been blocked,It keeps happening when we try to open my site, my site link is www. malltop1.com,i tried many ways to resolve this issue, but it's not work, crazy me!!, i test my site on many other virus softwear have not find the problem, for example McAfee,Symantec....etc,only Avast blocked my site!!,please help me with this,what's problem with it?

in the attachment have the alert details pictures,

please help me with this and tell me how to fix this problem?

Many thanks
Jacky

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Infection:URL:Mal, please help!!!
« Reply #1 on: December 12, 2012, 07:50:33 PM »
To begin with the site has a bad web reputation: http://www.mywot.com/en/scorecard/malltop1.com?utm_source=addon&utm_content=popup-donuts
Given clean here: http://sitecheck.sucuri.net/results/www.malltop1.com
and here: http://urlquery.net/report.php?id=391653
Sucupicious file detected by Quttera scanner:
us03.lockview dot cn/Js/lockview.js?uid=LK5341197
File size[byte]:   
13007
Severity:   
Potentially Suspicious
Details:   
Suspicious JavaScript code injection.
Reason:   
Procedure: + has been called with a string containing hidden JavaScript code <script>document.body.style.overflow=document.documentElement.style.overflow= 'hidden';</script>.
MD5:   
F1C55B93F375767367F9485F1DDF55F7
error in the html document: Line 10, Column 152, Damage XML_ERR_NAME_REQUIRED
Some indication fro SEO Blackhat SEO Spamming and content spamming for the IP at honeypots...
see: http://hosts-file.net/default.asp?s=184.82.200.6

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

REDACTED

  • Guest
Re: Infection:URL:Mal, please help!!!
« Reply #2 on: December 13, 2012, 05:56:10 AM »
hi polonus:

thank you so much,

we will change a ip and remove the lockview.js for check first.

but what's your meaning for "F1C55B93F375767367F9485F1DDF55F7 error in the html document: Line 10, Column 152, Damage XML_ERR_NAME_REQUIRED "???

waiting for your reply

thank you
Jacky

REDACTED

  • Guest
Re: Infection:URL:Mal, please help!!!
« Reply #3 on: December 13, 2012, 08:11:10 AM »
hi,

the IP was changed and the lockview.js also removed,
i also test on this page:
https://www.virustotal.com/url/8a17a185a0ac94a544f587e82b3399830205f4ccee3bbdbd10ded14f0ee12990/analysis/1355382259/

and there have not find any virus problem on it.  my site is a clean site.
but the Avast still is blocked my site yet,
im not understand now.

please help.

thank you so much
Jacky

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Infection:URL:Mal, please help!!!
« Reply #4 on: December 13, 2012, 08:19:12 AM »
You can report a possible FP here: http://www.avast.com/contact-form.php?loadStyles
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

REDACTED

  • Guest
Re: Infection:URL:Mal, please help!!!
« Reply #5 on: December 13, 2012, 08:41:25 AM »
hi Asyn, can you help me this? i just sent the report to Avast. hope they can reply back to me soon, and can you help me with this? so many of our customers said our website is blocked and can not visit our site, and we don't know how to fix it now.

thank you

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Infection:URL:Mal, please help!!!
« Reply #6 on: December 13, 2012, 08:44:05 AM »
As you reported it now, the guys at the viruslab will check it. ;)

Edit: http://zulu.zscaler.com/submission/show/81253ab4b731271e890ec967730fd81c-1355384771
« Last Edit: December 13, 2012, 08:50:26 AM by Asyn »
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

REDACTED

  • Guest
Re: Infection:URL:Mal, please help!!!
« Reply #7 on: December 14, 2012, 04:04:02 AM »
it there have anybody can help me? i reported to avast, but still now have nobody replied to me.

it's crazy me!!!

true indian

  • Guest
Re: Infection:URL:Mal, please help!!!
« Reply #8 on: December 15, 2012, 04:39:54 AM »
PM sent to virus analyst regarding this..Hoping response.  ;)

REDACTED

  • Guest
Re: Infection:URL:Mal, please help!!!
« Reply #9 on: December 16, 2012, 11:40:52 AM »
PM sent to virus analyst regarding this..Hoping response.  ;)
i tested, only avast said my website have the problem!! very stange, and i submit a ticket to Avast support, not 5 days pasted and not anybody give me a response!! very sadly!