Author Topic: Website reported as blocked for URL:Mal, report false infection?  (Read 37043 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Avast keeps reporting my church's podcast site as having a URL:MAL Infection. Their main site: connectioncc.org loads just fine, but their podcasts are hosted on connectioncc.com/podcast/files/. If I try to go here with webshield on, it says its infected by URL:MAL. Turning off webshield if's just an index of MP3 Files, so I don't see there being any malware. Can I tell avast to ignore this site (Exceptions TAB isn't working), without disabling malware url checking entirely or get Avast to remove the site from their database?

Thanks!!

--Matt

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: Website reported as blocked for URL:Mal, report false infection?
« Reply #1 on: June 23, 2014, 04:29:49 AM »
hello

use virus@avast.com with "False positive" in email subject.

or http://www.avast.com/contact-form.php

« Last Edit: July 25, 2014, 05:32:18 PM by jefferson santiag »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Website reported as blocked for URL:Mal, report false infection?
« Reply #2 on: June 23, 2014, 06:43:20 AM »
Quote
Avast keeps reporting my church's podcast site as having a URL:MAL Infection
URL.mal is not a infection ..... it means the URL and/or IP is on a blacklist for whatever reason ..... does not have to be infected


Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: Website reported as blocked for URL:Mal, report false infection?
« Reply #3 on: August 07, 2014, 11:43:43 PM »
sorry for the delay but that I can do it
we will unblocked now

Quote
Hello Matt,
This is a false positive, it should be fixed in the new update.
Best Regards
 
Richard Šrank
avast! Technical Support Specialist


REDACTED

  • Guest
Re: Website reported as blocked for URL:Mal, report false infection?
« Reply #4 on: April 13, 2016, 07:09:00 AM »
Please help me,

I have the same problem, when I access the my site:
http://www.publiguiaperu.com/

I am thinking that is a FP.

Thanks.


Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Website reported as blocked for URL:Mal, report false infection?
« Reply #6 on: April 13, 2016, 12:32:30 PM »
I removed publiguiaperu.com from our blacklist ;)

REDACTED

  • Guest
Re: Website reported as blocked for URL:Mal, report false infection?
« Reply #7 on: July 22, 2016, 06:31:32 AM »
Please help me,

I have the same problem, when I access the my site:
https://www.myshop.lk/

i have cleaned the files now and its still showing "URL.mal"
it means the URL and/or IP is on a blacklist, can you please remove it now


Thanks.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

REDACTED

  • Guest
Re: Website reported as blocked for URL:Mal, report false infection?
« Reply #9 on: July 22, 2016, 07:17:16 AM »
Yes, i have checked securi site, but i have scanned the whole site by eset and avast virus guard, its showing its all are clear, but i am confused now. What should i do now?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Website reported as blocked for URL:Mal, report false infection?
« Reply #10 on: July 22, 2016, 07:29:13 AM »
Guess you haven't read the Sucuri results :
Quote
How to get my site removed from their blacklist?
 If you are a Sucuri customer, just fill a malware removal request in your support dashboard. Our team will double check your site (and clean whatever needs to be cleaned) and contact ESET about it.

 If you are not a Sucuri customer (and using our free sitecheck), you will need to make sure your site is cleaned first. Once you do that, email samples@eset.com and they will re-check the site.

Here are more scan results :
http://zulu.zscaler.com/submission/show/90e08d4502b32f4a3dcc5be2e20e88c9-1469165407
http://www.web-malware-removal.com/website-malware-virus-scanner/?url=www.myshop.lk
https://www.virustotal.com/en/url/5fcbcf42c33ab23c15670c439cc9f206c0f12d39f5a6372248c1c83416bbd016/analysis/1469165422/
http://www.urlvoid.com/scan/myshop.lk/
http://urlquery.net/report.php?id=1469164450793
https://www.virustotal.com/en/ip-address/166.62.10.227/information/
http://urlquery.net/report.php?id=1469164607118
http://multirbl.valli.org/lookup/166.62.10.227.html
Quote
What should i do now?
- Step away from GoDaddy and get yourself dedicated hosting at a reliable host that takes security seriously
- Contact Sucuri and have them fix the problems
« Last Edit: July 22, 2016, 07:40:18 AM by Eddy »

REDACTED

  • Guest
Re: Website reported as blocked for URL:Mal, report false infection?
« Reply #11 on: July 22, 2016, 07:36:17 AM »
OK, thank you sir, i will send a mail to 'samples@eset.com' and update you, but avast also blocking my website? its showing URL:Mal??

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Website reported as blocked for URL:Mal, report false infection?
« Reply #12 on: July 22, 2016, 07:38:17 AM »
You can report a URL here: https://www.avast.com/report-a-url.php
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Website reported as blocked for URL:Mal, report false infection?
« Reply #13 on: July 22, 2016, 10:09:57 AM »
I have removed "myshop.lk" from our blacklist ;)

REDACTED

  • Guest
Re: Website reported as blocked for URL:Mal, report false infection?
« Reply #14 on: August 21, 2016, 06:56:11 PM »
Hello,

It seems my website has the same problem: http://pouyas.com/
Could you please remove it from the blacklist?

Thanks