Author Topic: Avast is blocking me & has blacked listed this site, false positive once again  (Read 41367 times)

0 Members and 1 Guest are viewing this topic.

RinaGomez

  • Guest


avast blocks me on a site that I have been a member for years and never had a problem getting in until today!  this site has no virus in it. avast has black listed it, again they are wrong to do this!

 I get a pop up saying-- Infection Blocked-- URL: h_208_91_207_91__ -- Infection: URL:Mal,-- the site that it blocks is: fling.com.

I have already called fling, they told me i'm the only one that has called in about this problem, their (IT's) looked at , no problems found on their side.

This is the only website that is being blocked,-- fling.com, and when I  turn off avast i can access the site, no problems! 

Here is what i have done so far, with nothing working!

1. ran a full avast scan, came up with nothing and boot scan!

2.tried 3 other browsers, still blocked that one site!

3.deleted avast and re-installed it

4. put that URL is the exclusions list

5. and finally reformatting my entire drive and staring over!

*So i know it's not the website, or my my pc, i have a new pc, windows 8.1,  I have done all the updates on windows and avast, avast is my only av program! Avast is somehow picking this site up as a false positive!

* and whats really insulting to me, when i called avast, they tried to get me to pay to fix their problem! This is not my problem, or the website, this is avast, i have a clean install and it still blocks that one site only, i have to turn avast off just to go to that one site!

...again this is what i get as a pop up when i tried to go to that site:


Infection Blocked
URL:   h_208_91_207_91__
Infection:   URL:Mal


can some please help me, im about to just uninstall avast!


 
« Last Edit: April 22, 2014, 03:28:46 PM by RinaGomez »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37584
  • Not a avast user
URL:mal means URL or IP is on a blacklist for whatever reason....it does not have to be infected

Urlvoid report  http://www.urlvoid.com/scan/fling.com/

hpHosts list it as EMD

Quote
EMD - Sites engaged in malware distribution
This classification is assigned to website's engaged in the distribution of malware (e.g. adware, spyware, trojans and viruses etc).

Sites with this classification typically either contain files (e.g. cracks, keygens, adware, spyware, trojans, viruses et al) or lead to such via (for example) "fake scanners" or other social engineering and misleading tactics. This includes the activities of rogue Internet Service Providers (ISPs) that host other sites to which the EMD classification applies.

WOT    https://www.mywot.com/en/scorecard/fling.com

Virustotal
https://www.virustotal.com/nb/url/b02b4191599305b7d7bae748dd010ce85627c3e6ce73b38938ad6bd899c29992/analysis/1397799966/



Quote
can some please help me, im about to just uninstall avast!   
Yea ......when your AV save you from a security issue you should of course uninstall it.... that makes sense     ::)


« Last Edit: April 18, 2014, 07:51:44 AM by Pondus »


RinaGomez

  • Guest
Ok you guys sent a brunch of links not really saying how to fix this!?!?  and FYI, when i say im going to del avast, i mean try another av program that is not so sensitive or buggy to me!  Avast should not be black listing this site, it has a great reputation and has been around for years!

with that being said, does anyone have a real solution and not some sarcastic remark or more links! I just need some help please, and avast needs to look into this and stop trying to take advantage of others when it's their false positive!

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5687
  • Spartan Warrior
Hi RinaGomez,

Just because a site has not had issues in the past does not mean it does not have issues today.  Various links by Pondus and Eddy above  tend to say your favorite site now has issues that avast! is actively alerting/blocking on.

Instead of visiting this site directly, we use live scanning sites/tools to visit there for us so we don't get infected.  These links posted are the result of those visits to this site.
Windows 10 Home 64-bit 22H2 Microsoft Windows Defender - Windows 11 Home 23H2 - Windows 11 Pro 23H2 Avast Premier Security version 24.4.6112 (build 24.4.9067.762) UI version 1.0.803

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
The problem is with the site itself, not with avast.

Remove all malware and malicious code from it.

When you have done so, you can ask avast to allow the site.
http://www.avast.com/contact-form.php

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
YOur case isn't made better by the fact it's a Porn website. Just saying.
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9408
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
You have a "Report a file as false positive" on a webshield popup. If you think it's falsely detected. Porn site or not, that's not important. avast! doesn't care about that. What they care about is malware. Are you 150% sure it's clean?
Visit my webpage Angry Sheep Blog

dprout69

  • Guest
Ok you guys sent a brunch of links not really saying how to fix this!?!?  and FYI, when i say im going to del avast, i mean try another av program that is not so sensitive or buggy to me!  Avast should not be black listing this site, it has a great reputation and has been around for years!

with that being said, does anyone have a real solution and not some sarcastic remark or more links! I just need some help please, and avast needs to look into this and stop trying to take advantage of others when it's their false positive!

No one was sarcastic to you.  You were provided with 10 links above, all from different providers that are UNRELATED to avast, which all say that website is bad.  Now with that said, though it is possible, but unlikely, there is a conspiracy by multiple providers to attack fling, the more likely answer is that when you contacted fling either the person was not knowledgeable or they were advised not to tell you they are distributing malware because it makes them money.  Therefore, my suggestion to you is follow the money:

- Recontact fling and show them the proof (links)
- and/or Turn off Avast so you can visit that site but when you are infected you have no one to blame but yourself
- and/or try a different antivirus which does not flag a website identified as bad by multiple companies and question whether your new anti virus is even doing its job


 

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33926
  • malware fighter
Well constant active unknown html malware seems up/is being launched from that address for 7,5 up to over 10 hours before being closed or no longer responsive, also known as being "dead", see: http://support.clean-mx.de/clean-mx/viruses.php?ip=208.91.207.91&sort=first%20desc

As how the compromittal of this site is being achieved, consider a safe virus viewer report as this one here:
http://support.clean-mx.de/clean-mx/view_virusescontent.php?url=http%3A%2F%2Fwww.fling.com%2Ftour%2Fzmstep%2F%3Fprg%3D1%26id%3Dadvidi%26tour%3Dzmstep%26ot%3Dbest%26cmp%3D9645577%26ad_id%3D518%26utm_source%3Dadvidi%26utm_medium%3D9645577%26utm_content%3D518%26utm_campaign%3Dzmstep;
circumventing abuse is taken place via "tour/zmstep/css/style.css"  and "GoogleApi" and "jcarousael script init".

Also a Moniker spam report given here for site: https://www.mywot.com/en/scorecard/fling.com?utm_source=addon&utm_content=popup

Recent history of badness on VT for IP: https://www.virustotal.com/nl/ip-address/208.91.207.91/information/
Also see: https://www.robtex.com/ip/208.91.207.91.html

Issues should be taken up with the webmaster there or the team that hosts that particular site on nginx:
PROHCI - Hosting Consulting, Inc in Irvine, Cal.
When this is a FP as Sucuri suggests giving the site the all green, one could file a fp report here: http://www.avast.com/contact-form.php

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

RinaGomez

  • Guest
ok, thank you! But, I think avast is too sensitive, i have experienced this before, avast will block legitimate sites, then i tried it back a few days later, and guess what, no problems! ...why?? because it got reported and avast make the mistake of blocking it for whatever reason!! we all know that 99% of all sites collect information, etc, avast is just too super sensitive! It's a great av don't get me wrong, but i don't feel they do enough reach-search before blocking, it is automatic tool that blocks these sites, when it needs to be more human involved!

I have to now turn off my av just to visit the site, i have scanned my pc many times after with different programs, boot scan, and reg scans, nothing found! its clean!!! avast need to work this out, surly im not the only one that has seen this!?!?!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37584
  • Not a avast user
Quote
I have to now turn off my av just to visit the site, i have scanned my pc many times after with different programs, boot scan, and reg scans, nothing found! its clean!!! avast need to work this out, surly im not the only one that has seen this!?!?!
The problem is not in your computer....

It is the website
https://www.virustotal.com/nb/url/b02b4191599305b7d7bae748dd010ce85627c3e6ce73b38938ad6bd899c29992/analysis/1397799966/



Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
ok, thank you! But, I think avast is too sensitive, i have experienced this before, avast will block legitimate sites, then i tried it back a few days later, and guess what, no problems! ...why?? because it got reported and avast make the mistake of blocking it for whatever reason!! we all know that 99% of all sites collect information, etc, avast is just too super sensitive! It's a great av don't get me wrong, but i don't feel they do enough reach-search before blocking, it is automatic tool that blocks these sites, when it needs to be more human involved!

I have to now turn off my av just to visit the site, i have scanned my pc many times after with different programs, boot scan, and reg scans, nothing found! its clean!!! avast need to work this out, surly im not the only one that has seen this!?!?!
You really need to understand what is happening here.  Avast does not decide on a whim, it is because there is something hookey on the website.  In this case it is hosting malware.  No sites are totally safe from being compromised http://www.dailymail.co.uk/news/article-2582071/Several-NATO-websites-hacked-cyber-attack-linked-crisis-Crimea.html  so what is good today may be hacked tomorrow

RinaGomez

  • Guest
(((((((((((((( update)))))))))))))))))))

well sure is funny that fling.com has been talking with me on phone, and they have found nothing  (I.T.) guys! further more no one else has called in about it, they have a toll free number online and are great about answering the phone, i never have waited more then 2 mins!

sure those links are going to show the site with a bad reputation, it's a adult site, but i have never had a problem with them and i have been a member for 8 years! I have friends on there also, no problems! a lot of conservative people make up bad things about those sites because they want to see them gone, but lets not get off track...

It is avast that is reading that website as malware , avast does this automatically, little to no human interaction! they just block  anything that has a poor site review, there is nothing wrong with that site and my pc is clean!  the problem is avast!!!

In a few days it will be unblocked, because avast with look into it, as i have wrote a support ticket! then they will see they made another mistake! just google and look how many people are having this same issue with other sites blocked by avast, but finding nothing on their pc, yet they cant access a site, hmmmm funny huh!?

the other things is, avast needs to let me (the user) decide if a site is harmful or not before blocking it!! avast is making money off this, they told me they can unblock it and help me if i pay, hmmmm, see how this works now ;-) it's a nice scam from avast! people wake up!!!!!!

Do you guys even realize that 95% of all  malware, virus, etc is false and made up by av company's to stay in business!!!...and all those links you sent me are  paid off by CEO's from avast and other av company's!  why,  ...for the all mighty dollar! 

one last thing to think about, when's the last time your pc really crashed or your info was stolen? all you see is this pop from avast saying you where protected! it's a lie,  99% of the time it is nothing!!  do your research!

here's a link for you, from a real website that speaks the truth!!! avast is a scam!

http://www.ripoffreport.com/r/Avast-/Select-StateProvince/Avast-Defective-antivirus-product-turns-into-sucker-bait-unknown-online-only-internet-1132521
« Last Edit: April 19, 2014, 07:35:36 AM by RinaGomez »

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5687
  • Spartan Warrior
Windows 10 Home 64-bit 22H2 Microsoft Windows Defender - Windows 11 Home 23H2 - Windows 11 Pro 23H2 Avast Premier Security version 24.4.6112 (build 24.4.9067.762) UI version 1.0.803