Author Topic: Avast reporting my site as Infected  (Read 5037 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Avast reporting my site as Infected
« on: November 16, 2015, 06:07:32 PM »
Suport,

My site (www. lojcomm.com.br) is being reported as insecured.
Not too long ago I found some malware installed into it, but it´s clean now, I even tested it with virustotal.
Could you please remove it from your blocked list?
« Last Edit: November 16, 2015, 07:03:46 PM by daysuke »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Avast reporting my site as Infected
« Reply #1 on: November 16, 2015, 06:13:10 PM »
Quote
Not too long ago I found some malware installed into it, but it´s clean now, I even tested it with virustotal.     
Virustotal does not scan the site for infections, it is a blacklist check

Sucuri sitecheck   https://sitecheck.sucuri.net/results/www.lojcomm.com.br/
Sucuri info  http://labs.sucuri.net/db/malware/500-error?v1

Killmalware   http://killmalware.com/www.lojcomm.com.br/
« Last Edit: November 16, 2015, 06:25:24 PM by Pondus »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast reporting my site as Infected
« Reply #2 on: November 16, 2015, 06:15:21 PM »
« Last Edit: November 16, 2015, 06:29:58 PM by Eddy »

REDACTED

  • Guest
Re: Avast reporting my site as Infected
« Reply #3 on: November 16, 2015, 07:06:08 PM »
Quote
Sucuri sitecheck   https://sitecheck.sucuri.net/results/www.lojcomm.com.br/
Sucuri info  http://labs.sucuri.net/db/malware/500-error?v1
It´s a code problem, not a malware.

Quote
Killmalware   http://killmalware.com/www.lojcomm.com.br/
It says that the site is clean

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Avast reporting my site as Infected
« Reply #4 on: November 16, 2015, 07:14:01 PM »
yes i am fully aware of what the scan result say ... just giving you the info

Have notified avast team about the block, check back tomorrow for info/reply


REDACTED

  • Guest
Re: Avast reporting my site as Infected
« Reply #5 on: November 16, 2015, 07:16:40 PM »
Please make the link not clickable.
We do not want people to visit (potentially) malicious websites.

Suspicion for spam:
http://www.web-malware-removal.com/website-malware-virus-scanner/?url=www.lojcomm.com.br

Blacklisted IP (malware):
http://urlquery.net/report.php?id=1447694293104
http://urlquery.net/report.php?id=1447694339336

Blacklisted domain/IP:
http://www.urlvoid.com/scan/lojcomm.com.br/

Critical server errors:
https://sitecheck.sucuri.net/results/www.lojcomm.com.br

Major security issues:
https://www.ssllabs.com/ssltest/analyze.html?d=lojcomm.com.br

All these tools are pointing to problems that were fixed.
How long do I have to wait til you guys decide that already is OK?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast reporting my site as Infected
« Reply #6 on: November 16, 2015, 07:19:03 PM »
No, the problems have not been fixed.
These scans where done about 1 hour ago.

Looking at the security problems, I would get a other host to start with.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Avast reporting my site as Infected
« Reply #7 on: November 16, 2015, 07:20:47 PM »
Quote
How long do I have to wait til you guys decide that already is OK?
We dont work for avast ... see my post above


Offline Para-Noid

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 6700
  • Trust only what you test yourself!
Re: Avast reporting my site as Infected
« Reply #8 on: November 16, 2015, 07:56:12 PM »
Quote
Sucuri sitecheck   https://sitecheck.sucuri.net/results/www.lojcomm.com.br/
Sucuri info  http://labs.sucuri.net/db/malware/500-error?v1
1) It´s a code problem, not a malware.

Quote
Killmalware   http://killmalware.com/www.lojcomm.com.br/
2) It says that the site is clean

1) Malware is "injected" into the code.
2) Going by just one result is hazardous at best.

We use a multitude of scanners/reports to get "the whole" picture.
    Myself I have almost two dozen "primary scanners" in my arsenal. Each one scans for different issues.
Dell Inspiron, Win10x64--HP Envy Win10x64--Both systems Avast Free v17.9.2322, Comodo Firewall v8.2 w/D+, MalwareBytes v3.0, OpenDNS, Super Anti-Spyware, Spyware Blaster, MCShield, Unchecky, Vivaldi Browser and, various browser security tools.

"Look before you leap!" Use online scanners before you click on any link.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: Avast reporting my site as Infected
« Reply #9 on: November 16, 2015, 10:34:31 PM »
Consider also: -http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwww.googleadservices.com%2Fpagead%2Fconversion.js

The following rar file was being flagged at urlquery dot net scan: http://urlquery.net/report.php?id=1444118058017

Server error states
Quote
Although VBScript became the ASP (Active Server Pages) de facto standard language, it's not the environment unique language. See:
    * Javascript works too
    * Perl works too
See IP website risk status -> 10 red out of 10: http://toolbar.netcraft.com/site_report?url=http://200.219.236.114
Server key and certificate mismatch.

So yes as Eddy already reported, there are issues to be resolved.

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Avast reporting my site as Infected
« Reply #10 on: November 20, 2015, 09:44:19 AM »
Hi,
This domain was blocked because a banker was present on it.
I do not see anything malicious now, so I am unblocking the domain. Keep in mind to secure it though - if something happened in the past, it can happen in the future again if you are not careful!

Offline faruqomolabi

  • Newbie
  • *
  • Posts: 1
Re: Avast reporting my site as Infected
« Reply #11 on: June 12, 2019, 12:04:13 AM »
Hello Admin.,

Please, Avast reports my site: https://illuminatejuice.com as not safe.

Please help me unblock my site

Thanks

Offline Sirmer

  • Avast team
  • Sr. Member
  • *
  • Posts: 324
Re: Avast reporting my site as Infected
« Reply #12 on: June 12, 2019, 06:20:07 AM »
Hello,
I removed your website from our blacklist
Hello Admin.,

Please, Avast reports my site: https://illuminatejuice.com as not safe.

Please help me unblock my site

Thanks