Author Topic: Clean web site is still blacklisted with Avast  (Read 2702 times)

0 Members and 1 Guest are viewing this topic.

phaet0n

  • Guest
Clean web site is still blacklisted with Avast
« on: December 06, 2012, 11:15:41 AM »
The site had a malware infection few months ago.  Now it clean, but avast still blocks the site. Can you exclude the site from avast's blacklist?
The site is hxxp://enoart.ru/

Web scans:
https://www.virustotal.com/url/637cc64e6312a94bcf1a03ec3bac5a545ea1aea05397e0aff1c1f5aaaf01b224/analysis/1354787401/

http://www.unmaskparasites.com/security-report/?page=enoart.ru

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33926
  • malware fighter
Re: Clean web site is still blacklisted with Avast
« Reply #1 on: December 06, 2012, 11:36:37 AM »
You should upgrade your PHP version, see: http://code.google.com/p/php52-backports/
Quttera scanner finds one potentially suspicious file:
aproex.com/opera_mini/6061/opera_mini.auto
File size[byte]:   
98352
Threat type:   
Potentially Suspicious
Details:   
Detected hidden reference to external web resource.
Reason:   
Detected generation of hidden DOM element [iframe].
MD5:   
4E624E4E1095071725A564B5A47577DB
Quttera scan data

Given clean here: http://urlquery.net/report.php?id=323005

You can report a FP for your website here:
http://www.avast.com/contact-form.php?loadStyles

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2295
Re: Clean web site is still blacklisted with Avast
« Reply #2 on: December 06, 2012, 11:43:01 AM »
The site had a malware infection few months ago.  Now it clean, but avast still blocks the site. Can you exclude the site from avast's blacklist?
The site is hxxp://enoart.ru/

Web scans:
https://www.virustotal.com/url/637cc64e6312a94bcf1a03ec3bac5a545ea1aea05397e0aff1c1f5aaaf01b224/analysis/1354787401/

http://www.unmaskparasites.com/security-report/?page=enoart.ru

Hello,
there is script tag which leads to "aproex.com", which is blocked correctly.

Milos