Avast WEBforum

Other => Viruses and worms => Topic started by: REDACTED on November 16, 2015, 06:07:32 PM

Title: Avast reporting my site as Infected
Post by: REDACTED on November 16, 2015, 06:07:32 PM: Suport,

My site (www. lojcomm.com.br) is being reported as insecured.
Not too long ago I found some malware installed into it, but it´s clean now, I even tested it with virustotal.
Could you please remove it from your blocked list?
Title: Re: Avast reporting my site as Infected
Post by: Pondus on November 16, 2015, 06:13:10 PM: Quote
Not too long ago I found some malware installed into it, but it´s clean now, I even tested it with virustotal.
Virustotal does not scan the site for infections, it is a blacklist check

Sucuri sitecheck https://sitecheck.sucuri.net/results/www.lojcomm.com.br/
Sucuri info http://labs.sucuri.net/db/malware/500-error?v1

Killmalware http://killmalware.com/www.lojcomm.com.br/
Title: Re: Avast reporting my site as Infected
Post by: Eddy on November 16, 2015, 06:15:21 PM: Please make the link not clickable.
We do not want people to visit (potentially) malicious websites.

Suspicion for spam:
http://www.web-malware-removal.com/website-malware-virus-scanner/?url=www.lojcomm.com.br

Blacklisted IP (malware):
http://urlquery.net/report.php?id=1447694293104
http://urlquery.net/report.php?id=1447694339336

Blacklisted domain/IP:
http://www.urlvoid.com/scan/lojcomm.com.br/

Critical server errors:
https://sitecheck.sucuri.net/results/www.lojcomm.com.br

Major security issues:
https://www.ssllabs.com/ssltest/analyze.html?d=lojcomm.com.br
Title: Re: Avast reporting my site as Infected
Post by: REDACTED on November 16, 2015, 07:06:08 PM: Quote
Sucuri sitecheck https://sitecheck.sucuri.net/results/www.lojcomm.com.br/
Sucuri info http://labs.sucuri.net/db/malware/500-error?v1
It´s a code problem, not a malware.

Quote
Killmalware http://killmalware.com/www.lojcomm.com.br/
It says that the site is clean
Title: Re: Avast reporting my site as Infected
Post by: Pondus on November 16, 2015, 07:14:01 PM: yes i am fully aware of what the scan result say ... just giving you the info

Have notified avast team about the block, check back tomorrow for info/reply
Title: Re: Avast reporting my site as Infected
Post by: REDACTED on November 16, 2015, 07:16:40 PM: Quote from: Eddy on November 16, 2015, 06:15:21 PM
Please make the link not clickable.
We do not want people to visit (potentially) malicious websites.

Suspicion for spam:
http://www.web-malware-removal.com/website-malware-virus-scanner/?url=www.lojcomm.com.br

Blacklisted IP (malware):
http://urlquery.net/report.php?id=1447694293104
http://urlquery.net/report.php?id=1447694339336

Blacklisted domain/IP:
http://www.urlvoid.com/scan/lojcomm.com.br/

Critical server errors:
https://sitecheck.sucuri.net/results/www.lojcomm.com.br

Major security issues:
https://www.ssllabs.com/ssltest/analyze.html?d=lojcomm.com.br

All these tools are pointing to problems that were fixed.
How long do I have to wait til you guys decide that already is OK?
Title: Re: Avast reporting my site as Infected
Post by: Eddy on November 16, 2015, 07:19:03 PM: No, the problems have not been fixed.
These scans where done about 1 hour ago.

Looking at the security problems, I would get a other host to start with.
Title: Re: Avast reporting my site as Infected
Post by: Pondus on November 16, 2015, 07:20:47 PM: Quote
How long do I have to wait til you guys decide that already is OK?
We dont work for avast ... see my post above
Title: Re: Avast reporting my site as Infected
Post by: Para-Noid on November 16, 2015, 07:56:12 PM: Quote from: daysuke on November 16, 2015, 07:06:08 PM
Quote
Sucuri sitecheck https://sitecheck.sucuri.net/results/www.lojcomm.com.br/
Sucuri info http://labs.sucuri.net/db/malware/500-error?v1
1) It´s a code problem, not a malware.

Quote
Killmalware http://killmalware.com/www.lojcomm.com.br/
2) It says that the site is clean

1) Malware is "injected" into the code.
2) Going by just one result is hazardous at best.

We use a multitude of scanners/reports to get "the whole" picture.
Myself I have almost two dozen "primary scanners" in my arsenal. Each one scans for different issues.
Title: Re: Avast reporting my site as Infected
Post by: polonus on November 16, 2015, 10:34:31 PM: Consider also: -http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwww.googleadservices.com%2Fpagead%2Fconversion.js

The following rar file was being flagged at urlquery dot net scan: http://urlquery.net/report.php?id=1444118058017

Server error states
Quote
Although VBScript became the ASP (Active Server Pages) de facto standard language, it's not the environment unique language. See:
* Javascript works too
* Perl works too
See IP website risk status -> 10 red out of 10: http://toolbar.netcraft.com/site_report?url=http://200.219.236.114
Server key and certificate mismatch.

So yes as Eddy already reported, there are issues to be resolved.

polonus (volunteer website security analyst and website error-hunter)
Title: Re: Avast reporting my site as Infected
Post by: HonzaZ on November 20, 2015, 09:44:19 AM: Hi,
This domain was blocked because a banker was present on it.
I do not see anything malicious now, so I am unblocking the domain. Keep in mind to secure it though - if something happened in the past, it can happen in the future again if you are not careful!
Title: Re: Avast reporting my site as Infected
Post by: faruqomolabi on June 12, 2019, 12:04:13 AM: Hello Admin.,

Please, Avast reports my site: https://illuminatejuice.com as not safe.

Please help me unblock my site

Thanks
Title: Re: Avast reporting my site as Infected
Post by: Sirmer on June 12, 2019, 06:20:07 AM: Hello,
I removed your website from our blacklist
Quote from: faruqomolabi on June 12, 2019, 12:04:13 AM
Hello Admin.,

Please, Avast reports my site: https://illuminatejuice.com as not safe.

Please help me unblock my site

Thanks