Author Topic: CANNOT ENTER IN OUR WEB!!! FALSE POSITIVE???  (Read 3711 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
CANNOT ENTER IN OUR WEB!!! FALSE POSITIVE???
« on: November 25, 2015, 01:29:49 AM »
Hello all,

We cannot enter inside our WEB, but another users that have another antivirus ( AVIRA, KASPERSKY, ETC...) can enter into the WEB any problem.

hxxp://www.airbilbaovirtual.com/index.php?lang=es


URL: hxxp://www.airbilbaovirtual.com/index.php/foro/categorias|{gzip}
Infección: JS:Injection-A [Trj]
Proceso: C:\Program Files\Mozilla Firefox\firefox.exe

I think is a false positive.

Can you help us?

It's a false positive?   

Thanks for your hard work, AVAST the best!!!
« Last Edit: November 25, 2015, 10:26:56 AM by moroni »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: CANNOT ENTER IN OUR WEB!!! FALSE POSITIVE???
« Reply #1 on: November 25, 2015, 04:54:42 AM »
1]
Make the link to the website not clickable.
We do not want people to visit a (potential) malicious site.

2]
If you have to ask if it is a false positive, you should not be running a website.
Hire someone who has the knowledge to properly do so.

The IP is blacklisted by McAfee, Spamhouse, CBL and others:
http://multirbl.valli.org/lookup/5.135.145.216.html
http://zulu.zscaler.com/submission/show/1ff30738d4923a23a04de9ec858a6536-1448422665
http://urlquery.net/report.php?id=1448422864165

Evil redirector in place:
http://urlquery.net/report.php?id=1448422859280

Infected with malware and outdated Joomla version:
https://sitecheck.sucuri.net/results/www.airbilbaovirtual.com

SSL problems :
https://www.ssllabs.com/ssltest/analyze.html?d=airbilbaovirtual.com&s=5.135.145.216&ignoreMismatch=on

http://retire.insecurity.today/#!/scan/22f11703f52c4a4b8ae9fb464e99eccf1d097e4cea9885c656e66514e4f4356c

Offline savcin

  • Avast team
  • Full Member
  • *
  • Posts: 113
Re: CANNOT ENTER IN OUR WEB!!! FALSE POSITIVE???
« Reply #2 on: November 25, 2015, 11:57:59 AM »
Your site has been infected. For further information please visit this link.

https://blog.sucuri.net/2015/11/jquery-min-php-malware-affects-thousands-of-websites.html

REDACTED

  • Guest
Re: CANNOT ENTER IN OUR WEB!!! FALSE POSITIVE???
« Reply #3 on: December 22, 2015, 11:11:59 AM »
Thanks to all!!!!

The ADMINISTRATOR is replacement the WEB because the web is infected with 6000 fakes pages.

ONE MORE TIME..........THANK YOU AVAST TEAM!!!!!

THE BEST.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: CANNOT ENTER IN OUR WEB!!! FALSE POSITIVE???
« Reply #4 on: December 22, 2015, 11:37:03 AM »
I'm not working for avast.
Just a user like you, but donating some time trying to help others.