Author Topic: Can you remove my website from Avast blacklist?  (Read 7251 times)

0 Members and 1 Guest are viewing this topic.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89679
  • No support PMs thanks
Re: Can you remove my website from Avast blacklist?
« Reply #15 on: August 22, 2016, 12:42:20 AM »
Interesting I just had an alert on the forums, so someone posted something, code or attachment that avast alerts on. But that post msg ID 1333722 now appears to have been removed. In order it would have been between Reply #11 and Reply #12 msg IDs.

Now it is coming on attempting to post, attached image2

The |>{gzip} at the end of the alert normally means an compressed/obfuscated script attempting to be loaded.

And scripts should be posted in image form rather than within the topic, even if wrapped in a code tag.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD - 27" external monitor 1440p 2560x1440 resolution - avast! free  24.9.6130 (build 24.9.9452.762) UI 1.0.818/ Firefox, uBlock Origin Lite, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89679
  • No support PMs thanks
Re: Can you remove my website from Avast blacklist?
« Reply #16 on: August 22, 2016, 12:56:53 AM »
Got another alert after reporting this topic for investigating.

I believe it comes from the unbroken link to a suspect site posted in the first post, this URL needs to be broken, hXXps://szczurekpros.pl/ so it isn't active.
« Last Edit: August 22, 2016, 12:58:29 AM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD - 27" external monitor 1440p 2560x1440 resolution - avast! free  24.9.6130 (build 24.9.9452.762) UI 1.0.818/ Firefox, uBlock Origin Lite, uMatrix/ MailWasher Pro/ Avast! Mobile Security

REDACTED

  • Guest
Re: Can you remove my website from Avast blacklist?
« Reply #17 on: August 22, 2016, 12:59:22 AM »
Got another alert after reporting this topic for investigating.

I believe it comes from the unbroken link to a suspect site posted in the first post, this URL needs to be broken, hXXps://szczurekpros.pl/ so it isn't active.

Fixed.
Sorry for problem

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89679
  • No support PMs thanks
Re: Can you remove my website from Avast blacklist?
« Reply #18 on: August 22, 2016, 01:01:25 AM »
OK, Thanks for the prompt correction.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD - 27" external monitor 1440p 2560x1440 resolution - avast! free  24.9.6130 (build 24.9.9452.762) UI 1.0.818/ Firefox, uBlock Origin Lite, uMatrix/ MailWasher Pro/ Avast! Mobile Security

REDACTED

  • Guest
Re: Can you remove my website from Avast blacklist?
« Reply #19 on: August 22, 2016, 01:03:12 AM »
OK, Thanks for the prompt correction.

I shared before part of code from my site in "code".
I obfuscated my html code and this is reason why Avast detect virus

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Can you remove my website from Avast blacklist?
« Reply #20 on: August 22, 2016, 10:03:45 AM »
I disabled the detection that was causing detection of the obfuscated code (JS:Downlaoder-DEL).

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34061
  • malware fighter
Re: Can you remove my website from Avast blacklist?
« Reply #21 on: August 22, 2016, 11:36:18 AM »
Witam szczurekPROS,

They probably thought better safe than sorry, you were right about the obfuscation as now HonzaZ has confirmed, that this is a FP, the obfuscation is "benign".
Still I would leave that shared hosting address as you run particular risks from naughty neighbours there not behaving and there could always come a moment you'd suffer a general IP block. The shared IP address being blacklisted should/could be  a "mene tekel ufpharsin" for you to change hoster(sign on the wall  מנא, מנא, תקל, ופרסין).

Wszystkiego dobrego,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

REDACTED

  • Guest
Re: Can you remove my website from Avast blacklist?
« Reply #22 on: August 22, 2016, 12:48:28 PM »
I disabled the detection that was causing detection of the obfuscated code (JS:Downlaoder-DEL).

Thanks.

If i will change code i will need again write to you for disable the detection?
« Last Edit: August 22, 2016, 01:11:19 PM by szczurekPROS »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34061
  • malware fighter
Re: Can you remove my website from Avast blacklist?
« Reply #23 on: August 22, 2016, 01:24:33 PM »
Hi szurekPROS,

You'd better. Same problems we see often with unsigned code. Code is often handled as it comes produced and not always comes fully bug-tested or pen-tested and then when it alerts a (false or real) detection pattern, you again would run into another FP detection.

You have learned some lessons now. Often in life it goes about what and who you know, you know.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!