Author Topic: Wordpress blocked by Avast (URL MAL), but not other antiviruses.  (Read 3560 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Hey there; I run a website for my writing stuff over here:

http://www.connorcadellin.com/

And while AVG and a number of others seem fine with it, Avast is blocking it on the basis of URL:MAL. I checked it with Succuri's scanner and while the server is running on an older version of Apache, there doesn't seem to be anything malicious flagged. I've had this problem for months and despite reinstalling various plugins and stripping the site down I have yet to work out the problem. I called a false positive report at the time but heard nothing back, and the site does not appear to be blacklisted anywhere I can find.

Any ideas? Would appreciate some help!


Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Wordpress blocked by Avast (URL MAL), but not other antiviruses.
« Reply #1 on: June 03, 2015, 07:52:44 PM »
Hello,


Scan with Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.


  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: Wordpress blocked by Avast (URL MAL), but not other antiviruses.
« Reply #2 on: June 03, 2015, 08:00:35 PM »
Scanning now. I will add that Avast gives a URL MAL report on other computers as well; I had a friend on the other side of the country check it.

REDACTED

  • Guest
Re: Wordpress blocked by Avast (URL MAL), but not other antiviruses.
« Reply #3 on: June 03, 2015, 08:16:55 PM »
Here we go, the log files from that tool.
« Last Edit: June 21, 2015, 05:16:12 PM by cadellinman »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31072
  • Watching (over?) you
    • Malware removal, Biljart and other things.
« Last Edit: June 03, 2015, 08:35:40 PM by Eddy »

REDACTED

  • Guest
Re: Wordpress blocked by Avast (URL MAL), but not other antiviruses.
« Reply #5 on: June 03, 2015, 08:35:59 PM »
Okay, this stuff is beyond me. I will forward it on to the guy who handles the server itself. Thanks for the fast responses, folks.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31072
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Wordpress blocked by Avast (URL MAL), but not other antiviruses.
« Reply #6 on: June 03, 2015, 08:39:02 PM »
Tell your host to at least update the server software.
As far as the log files, TwinHead will help you with those.

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Wordpress blocked by Avast (URL MAL), but not other antiviruses.
« Reply #7 on: June 03, 2015, 08:40:14 PM »
PC seems clean.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: Wordpress blocked by Avast (URL MAL), but not other antiviruses.
« Reply #8 on: June 03, 2015, 08:42:34 PM »
Cheers Twinhead. Intriguing that Quttera is flagging the Tumblr sharing buttons, I wonder if that instance of jetpack is compromised? I did reinstall that component during my attempts to clean it earlier, so that is odd.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37699
Re: Wordpress blocked by Avast (URL MAL), but not other antiviruses.
« Reply #9 on: June 03, 2015, 08:51:34 PM »
URL:mal means url og ip is blacklisted for whatever reason, there can be many, it does not have to be infected

If you think it is wrong, report it here. https://support.avast.com > avast virus lab
« Last Edit: June 03, 2015, 08:53:15 PM by Pondus »