Avast WEBforum

Non-English Zone => Espanol => Topic started by: REDACTED on October 21, 2016, 07:51:41 PM

Title: Sitio bloqueado
Post by: REDACTED on October 21, 2016, 07:51:41 PM

Buenas, soy el administrador del sitio (es un foro) http://www.dtforum.info y varios usuarios con su antivirus me han notificado que les está bloqueando el ingreso.

El sitio diariamente es escaneado y nunca tuve este tipo de problema, ni con ustedes ni con otros antivirus.

Por favor, remover de la lista de sitios bloqueados.

Muchas gracias,

Title: Re: Sitio bloqueado
Post by: Eddy on October 21, 2016, 08:18:54 PM

"JS:ScriptIP-inf [Trj]" detection, it means there is a blocked URL in a JS

Some blacklistings on that ASN :
http://urlquery.net/report.php?id=1477073206587

IP History :
https://www.virustotal.com/en/ip-address/72.52.167.162/information/

Browser difference and possible links to blacklisted sites :
https://www.websicherheit.at/website-malware-viren-scanner/?url=www.dtforum.info

Vulnerable library used :
http://retire.insecurity.today/#!/scan/fe441f77a09e3b81ccda25063cba1c3ce193bc78fc3c1208758a9b9063bde063

Advise :
- Fix the vulnerable library issue
- Remove the link to blacklisted site(s) from the JavaScript.

Title: Re: Sitio bloqueado
Post by: REDACTED on October 21, 2016, 08:24:23 PM

¿Y que tengo que hacer? Me puedes ayudar.

And what do I have to do? Can you help me?

Title: Re: Sitio bloqueado
Post by: jefferson sant on October 22, 2016, 09:00:31 PM

Quote from: last.reminder on October 21, 2016, 08:24:23 PM

¿Y que tengo que hacer? Me puedes ayudar.

And what do I have to do? Can you help me?

(http://i.imgur.com/n7H6829.png)

Hello.

Detection JS: ScriptIP-Inf was detected in the injected code in the page header from meta name="googlebot"

attached

Title: Re: Sitio bloqueado
Post by: HonzaZ on October 23, 2016, 10:20:36 PM

dtforum[.]info/index.php?action=dlattach was blocked due to a malicious file being downloaded from here. I unblocked it now ;)!