Avast WEBforum

Consumer Products => Avast Secure Browser => Avast Secure Browser for Windows => Topic started by: REDACTED on October 22, 2018, 08:57:48 PM

Title: Avast aborts connection with my website and acuses hin to have a malware
Post by: REDACTED on October 22, 2018, 08:57:48 PM: Hi, my urls are www.agimovel.com.br and www.agimovel.com.br/acesso3.6/login.php

On both URL's Avast says theres a malware named HTML:ChaseBank-A[Pish], I already ran a few tools to check my website and everything is ok, including McAFEE online scanner.

I also downloaded the file and opened with notepad and check everyline, it's all normal.

Several customers are calling me and worried about the safety of they info. Can you help me?
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: REDACTED on October 22, 2018, 09:23:49 PM: Hello Marcelo, você conseguiu alguma solução para o seu problema? acabou de acontecer o mesmo problema comigo se tiver alguma luz e te agradeço, valeu.
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: schmidthouse on October 22, 2018, 09:25:29 PM: Quote from: Breno27 on October 22, 2018, 09:23:49 PM
Hello Marcelo, você conseguiu alguma solução para o seu problema? acabou de acontecer o mesmo problema comigo se tiver alguma luz e te agradeço, valeu.

English Please. :)
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: REDACTED on October 22, 2018, 09:34:01 PM: Hello,

I have this problem too.

It started today.
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: REDACTED on October 22, 2018, 09:36:20 PM: Sorry, I'm having the same problem on two different servers, it follows the errors that are returning HTML: Framer-inf and HTML: ChaseBank-A. thanks
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: REDACTED on October 22, 2018, 09:54:52 PM: I have this problem as well. I hope Avast fixes this soon!
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: REDACTED on October 22, 2018, 10:04:28 PM: Eu descobri o motivo da mensagem....

Remova o conteudo do action do form.

Ex.:

<form action="login.php" method="post">

Mude para:

<form action="" method="post">

Aparentemente o problema é quando o action esta preenchido. :(
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: REDACTED on October 22, 2018, 10:06:22 PM: I discovered the reason for the message ....

Remove the content from the form's action.

Ex.:

<form action = "login.php" method = "post">

Change to:

<form action = "" method = "post">

Apparently the problem is when the action is filled. :(
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: REDACTED on October 22, 2018, 10:25:27 PM: Quote from: bmeneses86 on October 22, 2018, 10:06:22 PM
I discovered the reason for the message ....

Remove the content from the form's action.

Ex.:

<form action = "login.php" method = "post">

Change to:

<form action = "" method = "post">

Apparently the problem is when the action is filled. :(

Thanks but we can't do that...we have an entire CRM that's being blocked without any code change...

PS> this foruns captcha is killing me...
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: REDACTED on October 22, 2018, 11:55:44 PM: I`am facing the same problem.
Avast is acusing the URL of Phishing.
How to proceed to solve this problem ASAP?

Regards
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: REDACTED on October 23, 2018, 12:09:55 AM: Hello Avast? Any position?
The loss is great !!!
I have 2 servers with several sites with the same problem, all checked by Google, Sucuri, etc.

I have already made the false positive notice on the avast website https://www.avast.com/false-positive-file-form.php, but so far I have clients saying that my CRM is with viruses
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: REDACTED on October 23, 2018, 12:19:18 AM: Quote from: bmeneses86 on October 22, 2018, 10:06:22 PM
<form action = "login.php" method = "post">
Change to:
<form action = "" method = "post">
Apparently the problem is when the action is filled. :(

Can confirm this is the issue.
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: REDACTED on October 23, 2018, 12:25:28 AM: Quote from: krice on October 23, 2018, 12:19:18 AM
Quote from: bmeneses86 on October 22, 2018, 10:06:22 PM
<form action = "login.php" method = "post">
Change to:
<form action = "" method = "post">
Apparently the problem is when the action is filled. :(

Can confirm this is the issue.

No, this is not the problem!
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: REDACTED on October 23, 2018, 12:27:46 AM: Quote from: OAWEB on October 23, 2018, 12:25:28 AM
Quote from: krice on October 23, 2018, 12:19:18 AM
Quote from: bmeneses86 on October 22, 2018, 10:06:22 PM
<form action = "login.php" method = "post">
Change to:
<form action = "" method = "post">
Apparently the problem is when the action is filled. :(

Can confirm this is the issue.

No, this is not the problem!

may not be the problem you are seeing but if it is the one where they care complaining about chase phishing attack simply changing the action= value on the form tag from login.php to something else say login.phtml or blanking it as the other guy did makes the issue go away.
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: DavidR on October 23, 2018, 01:27:12 AM: This has been acknowledged as an FP and has had a fix added to the virus definitions update.

Quote from: medvid on October 22, 2018, 11:49:18 PM
This FP was fixed in new VPS, please update manually.
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: REDACTED on October 23, 2018, 02:14:07 AM: is this a false positive? has there been an official statement somewhere from avast on this that isn't in a backwaters forum?

fix your catcha too FFS
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: jefferson sant on October 23, 2018, 04:31:04 AM: Hello Marcelo314.

I still see the detection and created in area portuguese and other topics related.

Breno27, bmeneses86,Talisson.What is URL?

Reported to Vírus Lab~
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: Asyn on October 23, 2018, 07:03:53 AM: Quote from: info2045 on October 23, 2018, 02:14:07 AM
is this a false positive? has there been an official statement somewhere from avast on this that isn't in a backwaters forum?

fix your catcha too FFS
-> https://forum.avast.com/index.php?topic=222744.msg1480753#msg1480753

PS: Captcha is only needed for your first 3 posts. (Spam protection)
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: REDACTED on October 23, 2018, 01:01:52 PM: Is this fixed after users updates?

This put me in a lot of trouble, real lost of money and credibility. Can you picture customers being block for getting into my website?
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: REDACTED on October 23, 2018, 01:06:27 PM: Quote from: jefferson sant on October 23, 2018, 04:31:04 AM
Hello Marcelo314.

I still see the detection and created in area portuguese and other topics related.

Breno27, bmeneses86,Talisson.What is URL?

Reported to Vírus Lab~

You reposted my question in "portuguese" area? Can you pass me the link or topic? I'v searched and didn't found anything.
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: Asyn on October 23, 2018, 01:35:31 PM: Quote from: Marcelo314 on October 23, 2018, 01:01:52 PM
Is this fixed after users updates?
Yep.
Title: Re: Avast aborts connection with my website and acuses hin to have a malware
Post by: jefferson sant on October 24, 2018, 02:34:50 AM: Quote from: Marcelo314 on October 23, 2018, 01:06:27 PM
You reposted my question in "portuguese" area? Can you pass me the link or topic? I'v searched and didn't found anything.

https://forum.avast.com/index.php?topic=218817.msg1480732#msg1480732