Author Topic: Why Web Site Is Blocked?  (Read 3197 times)

0 Members and 1 Guest are viewing this topic.

BabyCharles

  • Guest
Why Web Site Is Blocked?
« on: August 19, 2012, 05:46:45 PM »
Hello avast.
Why my site blocked.
Can you tell me why?
All sites and ftp APIs are now clean.
My computer is protected by AVAST Internet Security.
However, my site by you is blocked.
Please specify system as the site of the attacker.

my website : hxxxp://googlemediaplayer.com/

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33923
  • malware fighter
Re: Why Web Site Is Blocked?
« Reply #1 on: August 19, 2012, 06:21:14 PM »
Hi BabyCharles,

Well your site is being blocked and not only by avast
Your WordPress software needs updating see: http://sitecheck.sucuri.net/results/googlemediaplayer.com/
Malware there has status OVERDUE with malicious activity over 1743.5 hrs.
The other malware from there now dead:  HTML:RedirME-inf Trj, TR/Dldr.Agent.548864, EXP/CVE-2011-3544
I would suggest against using this code from WP because we are in the days of HTML5 and then it is pretty useless:
head profile="hxtp://gmpg.org/xfn/11 )this is soon to be dropped'. As will be the following:
For cleaning up WP/head see: http://wordpress.org/support/topic/cleaning-up-wp_head  WP support forum link poster WPCodeMonkey

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

BabyCharles

  • Guest
Re: Why Web Site Is Blocked?
« Reply #2 on: August 19, 2012, 06:31:21 PM »
Hi polonos

I added the new code, but I do not think that this is nothing to do with the virus code.
When my site removed from blacklist?

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33923
  • malware fighter
Re: Why Web Site Is Blocked?
« Reply #3 on: August 19, 2012, 06:44:03 PM »
Hi BabyCharles,

If you think your website is beyond suspicion, you can report FP here:  http://www.avast.com/contacts
click the "Submit question to our sales support"  then change subject from drop down menu

you may add a link to this topic.....

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33923
  • malware fighter
Re: Why Web Site Is Blocked?
« Reply #4 on: August 19, 2012, 06:59:01 PM »
Hi BabyCharles,

What could be another consideration is to hide the Apache server´s full software version, see: http://www.ducea.com/2006/06/15/apache-tips-tricks-hide-apache-software-version/ posted by Marius. Ask the folks from 80qkmvmx.ni.net.tr about this, you should not longer transmit this info to the world and malcreants. Spamcheck and SafeBrowsing check are OK,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2294
Re: Why Web Site Is Blocked?
« Reply #5 on: August 20, 2012, 09:47:35 AM »
Hello,
there was "googlemediaplayer.com/player/test.jar", wi will fix the detection.

Milos

BabyCharles

  • Guest
Re: Why Web Site Is Blocked?
« Reply #6 on: August 21, 2012, 08:40:08 PM »
Hello Milos ;

Not Found

The requested URL /player/test.jar was not found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

i'm removed to all ftp files.

BabyCharles

  • Guest
Re: Why Web Site Is Blocked?
« Reply #7 on: August 22, 2012, 02:55:09 PM »
re-analyzed to all ftp files now clean.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33923
  • malware fighter
Re: Why Web Site Is Blocked?
« Reply #8 on: August 22, 2012, 04:36:50 PM »
Hi BabyCharles,

But the site is still a Bitdefender's TrafficLight Alert Page, and blocked by WOT: http://www.mywot.com/en/scorecard/googlemediaplayer.com
and McAfee's SiteAdvisor: http://www.siteadvisor.com/sites/googlemediaplayer.com
So you would miss all the visitors that have these in-browser security extensions installed, they are being prevented/warned  in first instance to go there
Sucuri still alerts that your WordPress is outdated (could be also for part of what is on the site, check everything!): Wordpress internal path: /home/nickc/public_html/goburo/wordprezzie.com/changingroom/wp-content/themes/changing-room/index.php
WordPress version outdated: Upgrade required.
List of links found htxp://googlemediaplayer.com/?feed=rss2
WordPress directory: htxp://changingroom.wordprezzie.com/wp-content
WordPress theme: htxp://changingroom.wordprezzie.com/wp-content/themes/changing-room/

With outdated WP on your site you could be hacked back/re-infected before you can say "Jack Robinson 1785",

polonus

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!