« previous next »
Pages: [1] 2   Go Down

Author Topic: " URL False/Positives "  (Read 5178 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
" URL False/Positives "
« on: March 29, 2016, 08:18:27 PM »
" URL False/Positives ??? "

http://booksmedicos.org

how to solve this problem?
Logged

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37533
  • Not a avast user
Re: " URL False/Positives "
« Reply #1 on: March 29, 2016, 08:35:07 PM »
« Last Edit: March 29, 2016, 08:41:48 PM by Pondus »
Logged

REDACTED

  • Guest
Re: " URL False/Positives "
« Reply #2 on: March 29, 2016, 08:56:58 PM »
As I locate the iframe
Logged

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: " URL False/Positives "
« Reply #3 on: March 29, 2016, 09:59:25 PM »
Avast complains because of a script being loaded from hxxp://geoloc8.9cd47096ab1495d8d3b18667f6a52b9c.com, which we block.
Logged

REDACTED

  • Guest
Re: " URL False/Positives "
« Reply #4 on: March 29, 2016, 10:18:03 PM »
I do not understand anything
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: " URL False/Positives "
« Reply #5 on: March 29, 2016, 10:34:52 PM »
The problem is that you are using a script from geovisites.
If you remove it, all should be good.
Logged

REDACTED

  • Guest
Re: " URL False/Positives "
« Reply #6 on: March 29, 2016, 10:46:13 PM »
No problem of geovisite

It is a script
<Iframe width = "1" height = "1" id = "localstorageiframe" src = "http://videodownloadconverter.dl.tb.ask.com/localstorage.jhtml">

As I do to remove it
Logged

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33903
  • malware fighter
Re: " URL False/Positives "
« Reply #7 on: March 29, 2016, 10:52:29 PM »
There are other issues also that needs to be addressed: http://retire.insecurity.today/#!/scan/480a426428011bdee837ac11605dfbc0d56f657b02fb70149f7b3aef9bd5b508
Also various adware links were blocked for me like: -http://cf.ads.kontextua.com/container/tags/42569.js
and -http://ads.adpv.com/ads.js
bad web rep and blocked:  /http://www.whackyvidz.com/Webservices/jsParseLinks.aspx?id=oJIO
Hidden iFrame link: /<iframe width="300" height="450" frameborder="0" scrolling="no" marginheight="0" marginwidth="0" allowtransparency="true" src="htxp://chatroll.com/embed/chat/booksmedicos?id=u7JDmt1d9Bl&amp;platform=blogger&amp;w=%240"></iframe>

Domain registrar and nameserver  is vulnerable to DROWn exploit: https://test.drownattack.com/?site=pir.org

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

REDACTED

  • Guest
Re: " URL False/Positives "
« Reply #8 on: March 29, 2016, 11:01:36 PM »
I want to find the iframe

<Iframe width = "1" height = "1" id = "localstorageiframe" src = "http://videodownloadconverter.dl.tb.ask.com/localstorage.jhtml">

Can someone explain
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: " URL False/Positives "
« Reply #9 on: March 29, 2016, 11:07:59 PM »
Go look for it on your webpages and remove it.

If you have to ask how, you should either not run a website or hire someone who does know how to do it properly.
Logged

REDACTED

  • Guest
Re: " URL False/Positives "
« Reply #10 on: March 29, 2016, 11:16:40 PM »
Do not give me many solutions
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: " URL False/Positives "
« Reply #11 on: March 29, 2016, 11:29:34 PM »
If you placed it on your site, you should know where it is.
If you let someone else place it on your site, ask that person or go search for it in the website files.
Logged

REDACTED

  • Guest
Re: " URL False/Positives "
« Reply #12 on: March 29, 2016, 11:35:22 PM »
any website to remove scritp
or to explain how
Logged

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48566
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: " URL False/Positives "
« Reply #13 on: March 29, 2016, 11:37:05 PM »
How was this script originally placed on your website ???
Logged
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXde -  Repair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

REDACTED

  • Guest
Re: " URL False/Positives "
« Reply #14 on: March 29, 2016, 11:40:08 PM »
I need help
Someone with knowledge of script
« Last Edit: March 30, 2016, 03:28:30 AM by booksmedicos »
Logged
Pages: [1] 2   Go Up
« previous next »