Author Topic: Avast detecting my website as malware  (Read 11844 times)

0 Members and 1 Guest are viewing this topic.

mouath

  • Guest
Avast detecting my website as malware
« on: August 07, 2012, 06:39:52 PM »
vast is detecting my website is being malware infected, but doesn't specify any other details. Avast 2 days ago updated its list and this is causing the error. I checked my website on many sites and no malware is detected. What could be the reason for that? and how can I identify the problem so i can fix it.

attached are screen shots of warning we get, but there is no detail of the type of malware, just url:mal

I opened Ticket ID:    PDN-718424 to track it also

your help is greatly appreciated

mouath

  • Guest
Re: Avast detecting my website as malware
« Reply #1 on: August 07, 2012, 06:40:53 PM »
all these sites didn't find anything and said it was clean

1. https://www.virustotal.com
2. http://www.google.com/
3. http://www.urlvoid.com/
4. http://sitecheck.sucuri.net/

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37505
  • Not a avast user
Re: Avast detecting my website as malware
« Reply #2 on: August 07, 2012, 06:50:53 PM »
And what is your website URL ?

Can you attach a screenshot of the avast warning?

mouath

  • Guest
Re: Avast detecting my website as malware
« Reply #3 on: August 07, 2012, 06:58:26 PM »

mouath

  • Guest
Re: Avast detecting my website as malware
« Reply #4 on: August 07, 2012, 08:09:24 PM »
any ideas?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: Avast detecting my website as malware
« Reply #5 on: August 07, 2012, 08:13:56 PM »
It would have been handy if you had posted the URLs of the analysis pages. But we will proceed with the assumption that these sites found nothing.

There is an on-line contact form, http://www.avast.com/contact-form.php?loadStyles for:  * Sales inquiries; Technical issues; Website issues; Report false virus alert in file; Report false virus alert on website; Undetected Malware; Press (Media), issues.

- If you are reporting an FP, then you get another input field open, click Browse button and navigate to the file or enter the web URL for the site you wish to submit for review (network shield), etc. A link to this topic also wouldn't hurt.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security


mouath

  • Guest
Re: Avast detecting my website as malware
« Reply #7 on: August 07, 2012, 09:19:06 PM »
i just submitted a false alarm ticket too

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37505
  • Not a avast user
Re: Avast detecting my website as malware
« Reply #8 on: August 07, 2012, 09:29:19 PM »

mouath

  • Guest
Re: Avast detecting my website as malware
« Reply #9 on: August 07, 2012, 09:50:41 PM »
thats not malware, its green.

whats a suspicious domain name alert?It didn't make sense to me

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37505
  • Not a avast user
Re: Avast detecting my website as malware
« Reply #10 on: August 07, 2012, 09:52:36 PM »
you need to scroll down..... to the yellow arrow

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Re: Avast detecting my website as malware
« Reply #11 on: August 07, 2012, 09:55:09 PM »
Hi Pondus,

Here it is given as secure: http://www.mbi-connexion.com/securite/diagnostic/2--2mcctv.com
But I saw this issue:
suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes
wXw.mongoosemetrics.com/jsfiles/js-correlation/ benign
[nothing detected] (script) wXw.mongoosemetrics.com/jsfiles/js-correlation/
     status: (referer=wXw.mongoosemetrics.com/jsfiles/js-correlation/mm-control.php
Found up here: http://xss.cx/2012/01/10/ghdb/xss-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report-01.html
injected  ////getvar.js' type='text/javascript'etc"////

polonus
« Last Edit: August 07, 2012, 10:01:13 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

mouath

  • Guest
Re: Avast detecting my website as malware
« Reply #12 on: August 07, 2012, 11:12:05 PM »
Thats not the problem, just for testing I removed it moongoose script from my side and still didn't do anything Avast still complained as being malware

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Re: Avast detecting my website as malware
« Reply #13 on: August 07, 2012, 11:17:09 PM »
Hi mouath,

I did not say there is an infection, but that script sure has XSS flaws as I showed from the link I provided.
The blocking should be reconsidered by the avast analysts, and they should remove it.
So wait for a coming update, as there was a malware domain block (now given as green where I last saw it)
and I do not know if that has been lifted yet,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

mouath

  • Guest
Re: Avast detecting my website as malware
« Reply #14 on: August 07, 2012, 11:39:59 PM »
ooh okay great

thanks for your feedback, great input