Avast WEBforum

Other => Viruses and worms => Topic started by: kenny kee on October 16, 2012, 12:23:20 PM

Title: Website False Alarm? Please help.
Post by: kenny kee on October 16, 2012, 12:23:20 PM
Greetings everyone,

htxp://edupod.com.sg

Avast! flagged my website as malware distributor. I have cleaned the website and checked with other online virus scanner and it is clean.

Is there anyway for Avast to lift this virus warning?

Thanks in advance.
Title: Re: Website False Alarm? Please help.
Post by: DavidR on October 16, 2012, 12:32:50 PM
Nothing found here http://sitecheck.sucuri.net/results/edupod.com.sg (http://sitecheck.sucuri.net/results/edupod.com.sg) or http://urlquery.net/report.php?id=234111 (http://urlquery.net/report.php?id=234111), but there are some other domains associated with that host server and that could be the issue.

There is one rating the site as malicious here, http://www.urlvoid.com/scan/edupod.com.sg/ (http://www.urlvoid.com/scan/edupod.com.sg/) and that is trendmicro, you can follow a link to trendmicro and enter your domain to see.

However this should be investigated further:
- There is an on-line contact form, http://www.avast.com/contact-form.php?loadStyles (http://www.avast.com/contact-form.php?loadStyles) for:  * Sales inquiries; Technical issues; Website issues; Report false virus alert in file; Report false virus alert on website; Undetected Malware; Press (Media), issues.

- If you are reporting an FP, then you get another input field open, click Browse button and navigate to the file or enter the web URL for the site you wish to submit for review, etc. A link to this topic also wouldn't hurt.
Title: Re: Website False Alarm? Please help.
Post by: polonus on October 16, 2012, 12:41:31 PM
There is unknown google malware running from your site and unknown_html_RFI_eval since 2011-06-27
ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP browser dependant malware, avast detects as JS:ScriptIP-inf[Trj]
Site is doing a conditional redirect,

polonus
Title: Re: Website False Alarm? Please help.
Post by: Milos on October 16, 2012, 01:08:19 PM
Hello,
we will unblock the domain in next stream update.

Milos
Title: Re: Website False Alarm? Please help.
Post by: kenny kee on October 16, 2012, 01:50:51 PM
Thanks you very very much for your advise and help  :)

Thanks guys!
Title: Re: Website False Alarm? Please help.
Post by: DavidR on October 16, 2012, 02:03:59 PM
You're welcome.