Avast WEBforum

Other => Viruses and worms => Topic started by: eric.dai on February 24, 2020, 05:36:32 AM

Title: Remove Our URL From Avast Blacklist
Post by: eric.dai on February 24, 2020, 05:36:32 AM
hello,

Our website wxw.norwii.com is on your blacklist.
Can you remove it from the blacklist?
Or tell me how to modify it?
thank you very much.
Title: Re: Remove Our URL From Avast Blacklist
Post by: Asyn on February 24, 2020, 05:50:32 AM
-> https://sitecheck.sucuri.net/results/www.norwii.com
-> https://www.virustotal.com/gui/url/5ca77050b979369df93d70b29f0a55434f51a0c4f580ed21fdbb8c7ff1799630/detection
Title: Re: Remove Our URL From Avast Blacklist
Post by: polonus on February 24, 2020, 04:22:52 PM
Several issues to improve on: https://webhint.io/scanner/6b8897e5-a476-4e2f-996e-728e329f5da7
Unpatched exploit for your CMS: https://github.com/rebic/metinfo (via document.write( )
> position: $id parameter /app/system/include/class/user.class.php in line 128 and 137
Yes, PHP can be a can of worms with PHP=based Content Management Software.

This exploit has been open since October last and is still unpatched, use other additional security measures.

XSS-DOM source and sinks: Results from scanning URL: -http://www.norwii.com/cache/lang_json_cn.js?1582535417
Number of sources found: 167
Number of sinks found: 26
&
Results from scanning URL: -http://www.norwii.com/cache/lang_json_cn.js?1582535417
Number of sources found: 2
Number of sinks found: 2

Wait for the final verdict from an avast team member, the only ones to come and unblock.

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)
Title: Re: Remove Our URL From Avast Blacklist
Post by: Milos on February 24, 2020, 04:58:08 PM
Hello,
use https://www.avast.com/false-positive-file-form.php, please.

Milos
Title: Re: Remove Our URL From Avast Blacklist
Post by: jefferson sant on February 25, 2020, 10:57:43 PM
hello,
Our website wxw.norwii.com is on your blacklist.
Can you remove it from the blacklist?
Or tell me how to modify it?
thank you very much.

Detection already been removed.

Quote from: Avast
Our virus specialists have been working on this problem and it has now been resolved. The provided website isn't detected by Avast anymore.