Author Topic: Avast detects my url as malware (Read 3658 times)

REDACTED · « **on:** August 30, 2015, 06:05:36 AM »

Hello avast detected me the URL of my web page as malware and block access not allowing visitors

URL: wxw.cryptodinero.com

scan: https://sitecheck.sucuri.net/results/www.cryptodinero.com/
scan: https://www.virustotal.com/nl/url/88535784c5a2bc05b98914ab20012696ec1edc46e4f1c83667db39a0fceedab6/analysis/1440906762/

in the scanner says me that not have virus

what can I do?

mikaelrask · « **Reply #1 on:** August 30, 2015, 10:03:09 AM »

hey and welcome to the forum.

im no expert but according to zulu its something with the domian that could be the reson why you get the warnings from avast.

http://zulu.zscaler.com/submission/show/bb3dc674c9f86f01c2409d9e3571ba43-1440921503

hoppefully someone more knowledge will give so more information then i can provide

Asyn · « **Reply #2 on:** August 30, 2015, 10:15:02 AM »

Mikael, you won't get valid results, if you use the disabled (wxw) URL.

New scan: http://zulu.zscaler.com/submission/show/85981a3001cfe74ec86eaf43b55e90c8-1440922225

Alexis, you can report a possible FP here: https://www.avast.com/contact-us.php?subject=VIRUS-FILE

polonus · « **Reply #3 on:** August 30, 2015, 12:32:40 PM »

There is a potentially suspicious file on this website:
-/2015/07/es-posible-tener-ingresos-de-internet.html
Severity:   Potentially Suspicious
Reason:   Detected potentially suspicious content.
Details:   Detected potentially suspicious initialization of function pointer to JavaScript method write <code> __tmpvar759711721 = write; <code/>
Threat dump:   View code -> http://codebeautify.org/jsviewer/7a2cfe
Threat dump MD5:   28829CFB7828FB255133EC608F6661DE
File size[byte]:   139470
File type:   HTML
Page/File MD5:   014CBC09E45BD772886AC762D61843C0
Scan duration[sec]:   0.380000

IP badness history: https://www.virustotal.com/nl/ip-address/74.125.70.121/information/
Issues here: http://www.dnsinspect.com/cryptodinero.com/1440930686

polonus

REDACTED · « **Reply #4 on:** August 30, 2015, 04:54:54 PM »

Quote from: polonus on August 30, 2015, 12:32:40 PM

There is a potentially suspicious file on this website:
-/2015/07/es-posible-tener-ingresos-de-internet.html
Severity:   Potentially Suspicious
Reason:   Detected potentially suspicious content.
Details:   Detected potentially suspicious initialization of function pointer to JavaScript method write <code> __tmpvar759711721 = write; <code/>
Threat dump:   View code -> http://codebeautify.org/jsviewer/7a2cfe
Threat dump MD5:   28829CFB7828FB255133EC608F6661DE
File size[byte]:   139470
File type:   HTML
Page/File MD5:   014CBC09E45BD772886AC762D61843C0
Scan duration[sec]:   0.380000

IP badness history: https://www.virustotal.com/nl/ip-address/74.125.70.121/information/
Issues here: http://www.dnsinspect.com/cryptodinero.com/1440930686

polonus

What can I do ? do not know how to fix that

polonus · « **Reply #5 on:** August 30, 2015, 07:30:40 PM »

You can take it up with the hoster for that suspicious link code: <link href='-http://www.cryptodinero.com/2015/07/es-posible-tener-ingresos-de-internet.html' rel='canonical'/>
As I fear that Avast blocks your site as part of a general IP block, you have to ask an Avast team member to make an exclusion for your domain or instruct you what to do.
We aren't Avast team member, just volunteers with relative knowledge, so we cannot.
You could contact Avast via virusAT avast dot com and refer to this thread.

polonus

mikaelrask · « **Reply #6 on:** August 31, 2015, 12:43:29 PM »

thanks asyn for that update

Asyn · « **Reply #7 on:** August 31, 2015, 12:46:44 PM »

Quote from: mikaelrask on August 31, 2015, 12:43:29 PM

thanks asyn for that update

You're welcome pal.

Sirmer · « **Reply #8 on:** September 01, 2015, 02:49:52 PM »

Detection removed from our blacklist

REDACTED · « **Reply #9 on:** September 02, 2015, 07:37:14 PM »

Quote from: Sirmer on September 01, 2015, 02:49:52 PM

Detection removed from our blacklist

already solved the problem?

jefferson sant · « **Reply #10 on:** September 02, 2015, 11:58:16 PM »

Quote from: Alexis52 on September 02, 2015, 07:37:14 PM

Quote from: Sirmer on September 01, 2015, 02:49:52 PM
Detection removed from our blacklist

already solved the problem?

site has been unblocked
tested some minutes ago does not have any warning flagged by Avast.

polonus · « **Reply #11 on:** September 03, 2015, 08:58:01 AM »

Hi jefferson sant,

That was already what was announced by an Avast team member, your confirmation is a bit "over the top" isn't it?
The OP can establish this also eventually after emptying his cache.

polonus