Avast WEBforum
Other => Viruses and worms => Topic started by: sergofun on October 20, 2010, 08:02:22 AM
-
The site had a malware infection few months ago (favicon.ico). Now it clean, but avast still blocks the site. Can you exclude the site from avast's blacklist?
The site is hxxp://eachbul.net/
VirusTotal (webscan) 0/6
http://www.virustotal.com/url-scan/report.html?id=1389dee4bc4097bcfb472991ceb4247a-1287546732
VirusTotal (index.html) 0/ 43
http://www.virustotal.com/file-scan/report.html?id=ffe79fa1ec906b4429c2b15d23fdf2a2eeff4d2f5b13ac6c582dfcf681262022-1287553938
-
This page seems to be <clean>
http://www.UnmaskParasites.com/security-report/?page=eachbul.net
but there is a warning, dont know if that has anything to do with it ?
Generator: WordPress 2.6.5 - Warning: Old version of WordPress. It may be vulnerable. Please upgrade.
-
renewed to the version 3
did not help
-
Pondus, thank you.
This page seems to be <clean>
but there is a warning, dont know if that has anything to do with it ?
Generator: WordPress 2.6.5 - Warning: Old version of WordPress. It may be vulnerable. Please upgrade.
I dont see this warning, I see that:
Generator: WordPress 3.0.1 ???
P.S.: the owner of the site is dimaprog, I just try to help him. His English is not good, as well as mine, however ::)
Ou, the site has been renewed to the new version.
dimaprog, то, что ты обновил WordPress до новой версии автоматически не исключит сайт из черного списка.
*that you have updated WordPress to the new version won't exclude automatically the site from the blacklist*
-
sergofun, thank you.
я понимаю что сайт из черного списка так не выключить, просто я надеялся что вывод сайта из блек листа както автоматизовано(у гугла например он тоже был в черном списке, я написал письмо, как написано в инструкции у них, и на протяжении 2 недель сайт вывели из черного списка и нормально индексировался).
что мне дальше делать?
-
что мне дальше делать?
*what I need to do?*
dimaprog, do nothing, just wait.
-
What Pondus is saying is that the version of WordPress you are using 2.6.5 is old, and perhaps this is what is causing your issue. There is a newer version of WordPress now, 3.0.1 that you should upgrade to and this may resolve your problem.
-
SafeSurf, it is renewed
SafeSurf, ok, i will wait
thanks to everybody
-
Hello,
It will be fixed in next VPS.
Best regards
Jan Sirmer
-
Sirmer , thank you. I will wait.
-
Sirmer, thank you
-
all works already
did not expect so quickly
once again thanks to everybody
-
Yes, there was an update, so that fixed your problem. :)
Now that your issue is resolved/fixed, please go back to the first open post in this topic, click the modify button in that Post and change the title/subject, add [Resolved] to the beginning of the title so this thread can be closed.
Feel free to come back any time you need help, to learn something new, or just to ask questions. We are here 24/7 for your convenience. Thank you.
-
SafeSurf, ok, thank you :)
-
Good day!
I am the owner of the site asia-holidays.ru
More recently (I can not say for sure) when you visit a site through the search engine Google under the search results appears:
"" "" Perhaps, this site has been hacked. "" "
Antivirus and Anti http://www.freedrweb.com/aid_admin/ hosting http://ukraine.com.ua activity were found.
When working with a hosting using Hosting Tools from the host, which protects against phishing. At kompttere Windows 7 antivirus Avast.
Kaspersky also sometimes gives the detection of the virus, but the object is a picture or style css, proveryanye and is not infected.
Object, suspected of virus activity:
- http://asia-holidays.ru/templates/rt_kinetic_j15/images/body/main/header-bg.png
Google's Webmaster Tools did not see malware.
Tell me how to solve this issue?
Sincerely, Dmitry Kozhemyaka.
-
Good day!
I am the owner of the site asia-holidays.ru
Please start a new topic.
-
добрый день
Наш сайт viravto.ru
Блокируется Вашим антивирусом avast
Снимите его из черного списка, согласно проверкам и системам поиска Яндекс и Гугл проблем с сайтом нет.
good afternoon.
Our site viravto.ru
It is blocked by your antivirus of avast
Remove it from a black list, sogdlasno to checks and search systems Yandex and Google of problems with a site isn't present.
-
Our site pornobunny.ru
It is blocked by your antivirus of avast
no virus. help
-
Site infected with malware, see: htxp://sitecheck.sucuri.net/results/pornobunny.ru
IDS flags ET RBN Known Russian Business Network IP (402)
Content after the < /html> tag should be considered suspicious,
polonus
-
polonus, thanks
advertizing with wizard-banners.com - removed
<script language="javascript" src="http://uno.wt-rotator116.ru/?t=vkm&noadult=1&pid=34534"></script>
-
Please, check my site hxtp://telefon-online.com.ua/ has no viruses, please, remove it an izcherny leaf.
Thanks
-
Posting multiple times in different topics won't help. This should be in its own 'new topic' here, http://forum.avast.com/index.php?board=4.0 (http://forum.avast.com/index.php?board=4.0), use the new topic button and start your own topic, rather than an old topic.
Please 'modify' your post change the URL from http to hXXp, to break the link and avoid accidental exposure to suspect sites, thanks.
e.g. hXXp://telefon-online.com.ua/
EDIT: The site however does appear to be infected, http://sitecheck.sucuri.net/results/telefon-online.com.ua/ (http://sitecheck.sucuri.net/results/telefon-online.com.ua/) and http://urlquery.net/report.php?id=731325 (http://urlquery.net/report.php?id=731325).
-
good afternoon.
Our site xww.lausander.land.ru
It is blocked by your antivirus of avast
Remove it from a black list, sogdlasno to checks and search systems Yandex and Google of problems with a site isn't present.
-
good afternoon.
Our site wxw.lausander.land.ru
It is blocked by your antivirus of avast
Remove it from a black list, sogdlasno to checks and search systems Yandex and Google of problems with a site isn't present.
-> http://sitecheck.sucuri.net/results/www.lausander.land.ru/
-> http://labs.sucuri.net/db/malware/malware-entry-mwanomalysp8
-> http://zulu.zscaler.com/submission/show/297208562d4b371c9a11c125415259c6-1358579550
-
@ Lausander
Please 'modify' your post change the URL from www to wXw, to break the link and avoid accidental exposure to suspect sites, thanks.
-
добрый день
Наш сайт shebip.ru
Блокируется Вашим антивирусом avast
Снимите его из черного списка, согласно проверкам и системам поиска Яндекс и Гугл проблем с сайтом нет.
good afternoon.
Our site shebip.ru
It is blocked by your antivirus of avast
-
добрый день
Наш сайт shebip.ru
Блокируется Вашим антивирусом avast
Снимите его из черного списка, согласно проверкам и системам поиска Яндекс и Гугл проблем с сайтом нет.
good afternoon.
Our site shebip.ru
It is blocked by your antivirus of avast
(http://my.jetscreenshot.com/18363/20130517-qesj-64kb.jpg)
some elements giving rise to suspicion
https://www.virustotal.com/pt/url/c8642f2cda3627738b058e3f64e87ee13af457974198023326788689464b166f/analysis/1368802400/
http://quttera.com/detailed_report/shebip.ru
http://www.webutation.net/go/review/shebip.ru
http://sitecheck.sucuri.net/results/shebip.ru/
http://wepawet.iseclab.org/view.php?hash=bb1c6e9fdc9721df601d2f2c31c7c5d7&t=1368804274&type=js
http://zulu.zscaler.com/submission/show/b703b95bc5d491656119e8a2bc86a626-1368802462
http://www.urlvoid.com/scan/shebip.ru/
Reported to analyst
-
добрый день
Наш сайт shebip.ru
Блокируется Вашим антивирусом avast
Снимите его из черного списка, согласно проверкам и системам поиска Яндекс и Гугл проблем с сайтом нет.
good afternoon.
Our site shebip.ru
It is blocked by your antivirus of avast
It will be unblocked.
Milos
-
добрый день
Наш сайт shebip.ru
Блокируется Вашим антивирусом avast
Снимите его из черного списка, согласно проверкам и системам поиска Яндекс и Гугл проблем с сайтом нет.
good afternoon.
Our site shebip.ru
It is blocked by your antivirus of avast
It will be unblocked.
Milos
Thank you!
-
Hello,
our site www.svetikovasvetlana.ru is blocked by antivirus avast. According to google and yandex and other antiviruses there is no problems with the site. Please remove it from black list.
https://www.virustotal.com/ru/url/6e61baacff4994e0ed30af4723f3491313a43d43bd94f85ac71cd48ad542ba21/analysis/1382411751/
-
You can report a possible FP here: http://www.avast.com/contact-form.php
-
That site is down..... Invalid IP Address.
-
alan1998, try here, it's work: http://www.avast.ru/contact-form.php
-
Hello,
We cleared our site maxnick.com of virus two months ago. Why in your database it is recognized as infected? Please remove it from your blacklist.
Look forward to your reply.
Thanks!
-
Hello,
We cleared our site maxnick.com of virus two months ago. Why in your database it is recognized as infected? Please remove it from your blacklist.
Look forward to your reply.
Thanks!
(http://i.imgur.com/DVngKfh.png)
Detection is correct
https://www.virustotal.com/en/url/29c2745a6f11e5bbbe9466805b21f46c25cb0c712a004c7903b502804bfd25fa/analysis/1387931075/
http://www.avgthreatlabs.com/website-safety-reports/domain/maxnick.com/
removing the following code in your site back to normal
(http://i.imgur.com/xgrZVuH.png)
ip is listed in blacklist
http://sitecheck.sucuri.net/results/maxnick.com
http://www.ipvoid.com/scan/188.121.46.1/
-
MaxNick, CLEAN MX says your site still has two links with active malware:
1. First on the main page http://support.clean-mx.de/clean-mx/viruses.php?id=18541094
Analysis about this malware from virustotal: https://www.virustotal.com/en/file/9552eb840fe61c9c57d2ac81f6a3df0998e48c6b40d5b06ed07f2a38a84d8445/analysis/
2. Second on the products page: http://support.clean-mx.de/clean-mx/viruses.php?id=18540830
Analysis about this malware from virustotal: https://www.virustotal.com/en/file/6e50d72518c71468070fc83925cab0abb361fba57e474bc461c7bb1a72685ab6/analysis/