Author Topic: Clean web site is still blacklisted with Avast !!!  (Read 5082 times)

0 Members and 1 Guest are viewing this topic.

vladikus999

  • Guest
Clean web site is still blacklisted with Avast !!!
« on: October 30, 2012, 04:02:04 PM »
Pleast look at my site 5stepsfreedom.ru , it is clean now. Take it please back from black list of Avast. Thx.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89119
  • No support PMs thanks
Re: Clean web site is still blacklisted with Avast !!!
« Reply #1 on: October 30, 2012, 04:19:09 PM »
You still appear to have an old version of wordpress, which could leave you open to further infection.

There also appears to have been some domains hosted by your host provider that have had and or may still be infected, so this might be an IP block rather than a domain block, http://urlquery.net/report.php?id=264380.

Also see http://sitecheck.sucuri.net/results/www.5stepsfreedom.ru/, the website details tab, and expand the list of links found as there are certainly some strange looking links there.

There is an on-line contact form, http://www.avast.com/contact-form.php?loadStyles for:  * Sales inquiries; Technical issues; Website issues; Report false virus alert in file; Report false virus alert on website; Undetected Malware; Press (Media), issues.

- If you are reporting an FP, then you get another input field open, click Browse button and navigate to the file or enter the web URL for the site you wish to submit for review (network Shield), etc. A link to this topic also wouldn't hurt.
« Last Edit: October 30, 2012, 04:20:56 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
Re: Clean web site is still blacklisted with Avast !!!
« Reply #2 on: October 30, 2012, 04:44:32 PM »
The avast alert is for JS:ScriptIP-inf[Trj]through a conditional redirect to htxp://5stepsfreedom.ru/ found up as URL:Mal
See why your WP version is vulnerable: http://www.cvedetails.com/vulnerability-list/vendor_id-2337/product_id-4096/version_id-100794/Wordpress-Wordpress-2.9.2.html
To cure autosave.js problems disable: http://www.untwistedvortex.com/adjust-wordpress-autosave-or-disable-it-completely/ author RT Cunningham

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

vladikus999

  • Guest
Re: Clean web site is still blacklisted with Avast !!!
« Reply #3 on: October 31, 2012, 07:37:02 PM »
Thx for answer. I have upgrade my wordpress to the last version, and now i have WordPress 3.4.2.
And another one step i have done, i have activate plugin: Disable Autosave.php
Now, i think all must by ok. Please look my site again. Thx again.

vladikus999

  • Guest
Re: Clean web site is still blacklisted with Avast !!!
« Reply #4 on: November 02, 2012, 08:58:14 AM »
Please answer to my up (last) post. Thx :)

vladikus999

  • Guest
Re: Clean web site is still blacklisted with Avast !!!
« Reply #5 on: November 11, 2012, 03:05:32 PM »
up

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Clean web site is still blacklisted with Avast !!!
« Reply #6 on: November 11, 2012, 03:10:40 PM »
Did you already follow Dave's advice (report a FP)..??
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

vladikus999

  • Guest
Re: Clean web site is still blacklisted with Avast !!!
« Reply #7 on: November 24, 2012, 08:06:00 PM »
Yes! I have done all advice!

vladikus999

  • Guest
Re: Clean web site is still blacklisted with Avast !!!
« Reply #8 on: November 28, 2012, 10:29:03 PM »
up

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

vladikus999

  • Guest
Re: Clean web site is still blacklisted with Avast !!!
« Reply #10 on: December 05, 2012, 10:56:07 PM »
Geo-location Risk it is not seriosly..  It is joke?
My site in Rassia. It is not mean what it have virus. Please unfiltred my site from your's base. Thx again.

vladikus999

  • Guest
Re: Clean web site is still blacklisted with Avast !!!
« Reply #11 on: December 10, 2012, 11:27:13 PM »
UP

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
Re: Clean web site is still blacklisted with Avast !!!
« Reply #12 on: December 11, 2012, 12:09:00 AM »
Hi vladikus999,

We that reply here cannot do anything about your apparent blacklisted situation.
Did you send the http://www.avast.com/contact-form.php?loadStyles
report?
Then it is all up to the avast team to eventually unblock your site/IP...

We are just website forum members here, that try to help out with our various scanning results and analyses.

All your 99 files there on that site
seems clean -> here: http://quttera.com/detailed_report/5stepsfreedom.ru
and here as well ->  http://sitecheck.sucuri.net/results/5stepsfreedom.ru
and here: -> http://urlquery.net/queued.php?id=5308044 see: http://urlquery.net/screenshot.php?id=375422
Nothing on clean mx either for that IP...
So i.m.h.o. this site is not malicious at this moment,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!