Author Topic: False Positive Website?  (Read 6895 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33902
  • malware fighter
Re: False Positive Website?
« Reply #15 on: March 19, 2014, 05:07:02 PM »
That is a valid detection. iFrame check: Suspicious
htxp://duxburyclipper dot ma dot newsmemory.com/'
Javascript check:
Suspicious
guage="javascript"> function dnnviewstate() { var a=0,m,v,t,z,x=new array('9091968376','8887918192818786347374918784939277359287883421333333338896','778787','949990
See for the SEO Spam malware detected: http://sitecheck.sucuri.net/scanner/?scan=http%3A%2F%2Fduxburyclipper.com
Site vulnerable because of: Joomla version outdated: Upgrade required.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: False Positive Website?
« Reply #16 on: March 19, 2014, 05:08:48 PM »
I am getting (using Avast Internet Security) what appears to be a false positive for http://duxburyclipper.com. The site is in frequent use, does not get flagged by any other anti-malware products (e.g. Norton, McAfee, AVG, Kapersky, etc.), and does not seem to have infected any computers with any malaware. It is a local newspaper's site. I called Avast support, allowed a remote session on one of my computers, and got a rather snarky assertion that something must be wrong with my computer and that there was no way this was a false positive from Avast. I'm reasonably sure, however, that it is. Anyone got any idea what's going on here? Thanks!
you dont say what avast say? ....is it URL:mal ?

urlvoid.   http://www.urlvoid.com/scan/duxburyclipper.com/


VFN

  • Guest
Re: False Positive Website?
« Reply #17 on: March 19, 2014, 05:21:38 PM »
Thanks for the link polonus and thanks to you both for the help.