Author Topic: avast falsely triggered on my site.  (Read 6014 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
avast falsely triggered on my site.
« on: June 30, 2014, 07:56:30 AM »
Avast srabyvaet falsely on my website, writes that by un address is sites infected with viruses.
We checked your server with five anti-virus.
Not one anti-virus does not work, including Avast!
But when you try to go to the site, it says that on the avast site allegedly viruses.
Avast triggered by un address 5.254.100.170.
By un address apparently were previously infected sites, now un address 5,254,100,170 is one domain reywood.ru.
Domain reywood.ru 3 months is on the un address 5.254.100.170.
We have already created a ticket. on your system: Open ticket: # RHX-614-27853
https://support.avast.com/Default/Tickets/Ticket/View/RHX-614-27853
But for some reason considered a ticket a week.
And do not answer that ticket be accepted for processing!
How can we be?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37545
  • Not a avast user
Re: avast falsely triggered on my site.
« Reply #1 on: June 30, 2014, 08:06:44 AM »
What is your website URL ?
And what is the message from avast?

« Last Edit: June 30, 2014, 08:08:31 AM by Pondus »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37545
  • Not a avast user
Re: avast falsely triggered on my site.
« Reply #2 on: June 30, 2014, 08:19:06 AM »
IP  5.254.100.170  is blacklisted by apews.org

Quote
    Entry matching your Query: E-1227094
5.192.0.0/10
CASE: C-131
Unallocated CIDR, no traffic until allocated,
or allocated to bad reputation provider
or allocated but dynamic / generically named IPs,
or bogons, see www.cidr-report.org,
or orphaned IP / CIDR in routing table
History:
Entry created 2014-03-10

REDACTED

  • Guest
Re: avast falsely triggered on my site.
« Reply #3 on: June 30, 2014, 08:47:00 AM »
What is your website URL ?
And what is the message from avast?
Website url http://reywood.ru/
Quote
IP  5.254.100.170  is blacklisted by apews.org
Quote

        Entry matching your Query: E-1227094
    5.192.0.0/10
    CASE: C-131
    Unallocated CIDR, no traffic until allocated,
    or allocated to bad reputation provider
    or allocated but dynamic / generically named IPs,
    or bogons, see www.cidr-report.org,
    or orphaned IP / CIDR in routing table
    History:
    Entry created 2014-03-10
What is it?
The situation is now such.
Reywood.ru site is on un address 5.254.100.170.
By un address 5.254.100.170 is the only site reywood.ru
« Last Edit: June 30, 2014, 08:57:04 AM by bagas1983 »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37545
  • Not a avast user
Re: avast falsely triggered on my site.
« Reply #4 on: June 30, 2014, 10:37:46 AM »
Check IP blacklisting here  http://whatismyipaddress.com/blacklist-check

If you think this is wrong......

You can upload files and report issues to avast  here : http://www.avast.com/contact-form.php  (select subject according to Your case)
« Last Edit: June 30, 2014, 10:40:04 AM by Pondus »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
Re: avast falsely triggered on my site.
« Reply #5 on: June 30, 2014, 11:13:37 AM »
Well here is that IP's address badness history: https://www.virustotal.com/en/ip-address/5.254.100.170/information/
There was a complaint for that IP: http://www.liveipmap.com/5.254.100.170
If the detection is IP related and your website is clean, you should ask for an exclusion via
http://www.avast.com/contact-form.php

polonus

Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

REDACTED

  • Guest
Re: avast falsely triggered on my site.
« Reply #6 on: June 30, 2014, 12:16:35 PM »
Well here is that IP's address badness history: https://www.virustotal.com/en/ip-address/5.254.100.170/information/
There was a complaint for that IP: http://www.liveipmap.com/5.254.100.170
If the detection is IP related and your website is clean, you should ask for an exclusion via
http://www.avast.com/contact-form.php

polonus
Possible before 5.254.100.170 owner un addresses used it for personal gain.
Now ip address 5.254.100.170 given to me by this site eeee.
IP address is in my 6 months and only you using for this site reywood.ru.
Website reywood.ru not what harm does not.
Use third-party base of gray IP addresses that are not updated, it's bad.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

REDACTED

  • Guest
« Last Edit: June 30, 2014, 02:39:03 PM by bagas1983 »

REDACTED

  • Guest
Re: avast falsely triggered on my site.
« Reply #9 on: June 30, 2014, 02:59:06 PM »
Hoster said that these domains (d-ranka.net.ua,i-zyskat.net.ua) were used to address this un (5.254.100.170).
After see the owner domains (d-ranka.net.ua,i-zyskat.net.ua) refused to host.
And hoster gave me this ip address (5.254.100.170).

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: avast falsely triggered on my site.
« Reply #10 on: July 01, 2014, 02:27:41 PM »
http://multirbl.valli.org/lookup/5.254.100.169.html
IP is blacklisted by Apews, but that is nothing to worry about since they do not update their databse.

http://zulu.zscaler.com/submission/show/e8b51821a44f7e025fbe51994336a848-1404217107
Netblocksize is risky.
Ask you host to change it.

Quttera is reporting the site (1 file) as suspicious:
http://quttera.com/detailed_report/reywood.ru

Looks to me other than the above mentioned, the site can be deblocked.
If you haven't done so already, please use the contact form to ask avast to allow the website.

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6674
  • volunteer
Re: avast falsely triggered on my site.
« Reply #11 on: July 02, 2014, 01:07:17 AM »
Avast srabyvaet falsely on my website, writes that by un address is sites infected with viruses.
We checked your server with five anti-virus.
Not one anti-virus does not work, including Avast!
But when you try to go to the site, it says that on the avast site allegedly viruses.
Avast triggered by un address 5.254.100.170.
By un address apparently were previously infected sites, now un address 5,254,100,170 is one domain reywood.ru.
And do not answer that ticket be accepted for processing!
How can we be?

hello
URL was unblocked
nothing this being  blocked by Avast.

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: avast falsely triggered on my site.
« Reply #12 on: July 02, 2014, 01:11:19 AM »
URL still blocked by Trend Micro, reported via the block page to review it :)
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37545
  • Not a avast user
Re: avast falsely triggered on my site.
« Reply #13 on: July 02, 2014, 01:16:10 AM »
URL still blocked by Trend Micro, reported via the block page to review it :)
try scan.  http://mcshield.net    with Trend Micro.     ;)


Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: avast falsely triggered on my site.
« Reply #14 on: July 02, 2014, 01:21:28 AM »
Also blocked.

Also sent for review :)
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10