Author Topic: Avast is detecting a virus on my site?  (Read 3169 times)

0 Members and 1 Guest are viewing this topic.

miketh2005

  • Guest
Avast is detecting a virus on my site?
« on: November 30, 2013, 10:36:25 PM »
A user sent me a message that he can't access my site because of Avast saying there is a virus. I've tested on Virus Total with no result:

https://www.virustotal.com/en/url/89bc585bd20fe5c66c76d2c83268d559afacec5503c25bd9541abfc6ce7f7c13/analysis/1385772931/

And the more specific URL:

https://www.virustotal.com/en/url/9fb905e290013d93effe7b463489eb62945ebcbb7b2c24608396b077a6cb71f8/analysis/1385772984/

My website is: http://pleasuretrove.blogspot.com (NSFW)

The infection ID Avast is giving: (JS:Decode-BQU [Trj])

Maybe I have to take off some Javascript on my site, but there is a lot loaded on my site and I wouldn't know where to start....

Thanks a bunch!

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Avast is detecting a virus on my site?
« Reply #1 on: November 30, 2013, 10:52:12 PM »
There is a ton of javascript malware on your site: http://sitecheck.sucuri.net/scanner/?scan=http%3A%2F%2Fpleasuretrove.blogspot.com%2F

You can wait for polonus, an website analyst from the forum.
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline Para-Noid

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 6700
  • Trust only what you test yourself!
Dell Inspiron, Win10x64--HP Envy Win10x64--Both systems Avast Free v17.9.2322, Comodo Firewall v8.2 w/D+, MalwareBytes v3.0, OpenDNS, Super Anti-Spyware, Spyware Blaster, MCShield, Unchecky, Vivaldi Browser and, various browser security tools.

"Look before you leap!" Use online scanners before you click on any link.

miketh2005

  • Guest
Re: Avast is detecting a virus on my site?
« Reply #3 on: December 01, 2013, 12:29:59 AM »
That website has issues!
Found these...

http://sitecheck.sucuri.net/results/pleasuretrove.blogspot.com (click "malware found")
http://zulu.zscaler.com/submission/show/02aa78cb337d601309cf75f6c3c27be6-1385847669
https://asafaweb.com/Scan?Url=pleasuretrove.blogspot.com

Clickjacking explained here.

Hi. Thanks a lot for that, both of you.

I'm trying to put this code on my blog in the XML:

x-frame-options: SAMEORIGIN

But I got this error:

Error parsing XML: Content is not allowed in prolog.

Also, when I visit that site it tells me that it is only relevant to ASP.NET websites.

The 2nd link says everything is good.

It seems that only SUCURI and avast! is taking issue with the site. I don't know how to fix it. =(

Thanks!

miketh2005

  • Guest
Re: Avast is detecting a virus on my site?
« Reply #4 on: December 02, 2013, 01:49:37 AM »
Anyone?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: Avast is detecting a virus on my site?
« Reply #5 on: December 02, 2013, 07:45:05 AM »
Quote
It seems that only SUCURI and avast! is taking issue with the site. I don't know how to fix it. =(
Sucuri can help you   http://sucuri.net/signup


miketh2005

  • Guest
Re: Avast is detecting a virus on my site?
« Reply #6 on: December 02, 2013, 11:01:42 AM »
Quote
It seems that only SUCURI and avast! is taking issue with the site. I don't know how to fix it. =(
Sucuri can help you   http://sucuri.net/signup

I make about $2 a month from this website because Adsense wouldn't accept my kind of content. Why is everyone pushing this website? Is it impossible to do on my own?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: Avast is detecting a virus on my site?
« Reply #7 on: December 02, 2013, 11:53:11 AM »
i let Norman lab check that code .... and this is what they say

Quote
I deobfuscated the script and analysed,but nothing found malicious,no driveby attacks,no redirection,no downloaders found and this code is used in google blogger(blogspot) to make the comments section looks prettier,looks like dropdown comments,so ignoring this file,Please revert back if you have any information


miketh2005

  • Guest
Re: Avast is detecting a virus on my site?
« Reply #8 on: December 02, 2013, 11:28:22 PM »
i let Norman lab check that code .... and this is what they say

Quote
I deobfuscated the script and analysed,but nothing found malicious,no driveby attacks,no redirection,no downloaders found and this code is used in google blogger(blogspot) to make the comments section looks prettier,looks like dropdown comments,so ignoring this file,Please revert back if you have any information

Thanks! I didn't think there was malware, but this is still a problem because users who have avast! are still too scared to visit my site. Is there any way to appeal avast! for my site? Thanks.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: Avast is detecting a virus on my site?
« Reply #9 on: December 02, 2013, 11:32:04 PM »
You can report it here. http://www.avast.com/contact-form.php  (select subject according to Your case)
you may add a link to this topic in case they reply here.