Author Topic: why did you state my site as dangerous?  (Read 7228 times)

0 Members and 1 Guest are viewing this topic.

BabyCharles

  • Guest
why did you state my site as dangerous?
« on: April 28, 2009, 01:04:19 AM »
my web site : http://imagesuploading.us

i cant visit my site with avast antivirus. my site was attacked by hackers and you stated it as dangerous site. please solve this problem immediately

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: why did you state my site as dangerous?
« Reply #1 on: April 28, 2009, 01:08:01 AM »
Well, if its your site then you proabally have to go on it with Firefox (Current Version) with NoScript (Current Version). Then just edit the page by taking out the dangerous/unwanted/unnessary/Iframe/favicon.gif things that is causing the virus. If you don't know what is causing the virus, then I suggest you wait until a professional Avast user can help you with the coding. Also, please change the http:// to hXXp:// to prevent people from axidently clicking on the link.
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."

BabyCharles

  • Guest
Re: why did you state my site as dangerous?
« Reply #2 on: April 28, 2009, 01:16:49 AM »
thanks for informing but, i deleted my ftp and all files within, and moved to another host. only problem of my site is that it has been stated as dangerous by avast. need your help to fix it. thank you

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: why did you state my site as dangerous?
« Reply #3 on: April 28, 2009, 01:56:23 AM »
thanks for informing but, i deleted my ftp and all files within, and moved to another host. only problem of my site is that it has been stated as dangerous by avast. need your help to fix it. thank you

Is it because the web server you use adds a hidden virus in it now? Whats the website name of where you upload?
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."

BabyCharles

  • Guest
Re: why did you state my site as dangerous?
« Reply #4 on: April 28, 2009, 02:05:29 AM »
i was infected with iframe virus before. but later i formatted my harddisk and scanned whole harddisk with avast. now i dont have any problem with my pc

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: why did you state my site as dangerous?
« Reply #5 on: April 28, 2009, 02:40:31 AM »
Well this is all that is on your site now, see image. So for what ever reason it is still hacked and because of the previous malicious state it was blocked, you can report this as virus (at) avast (dot) com once you have cleaned up your site (as you are here) or it is unlikely to be removed from the list very quickly.

What I find strange is how you can get a .us domain from Turkey.

You computer being clean isn't really the issue, what is, is your Host and the site being clean.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline mkis

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1618
Re: why did you state my site as dangerous?
« Reply #6 on: April 28, 2009, 07:09:04 AM »
You can get a .us domain from just about anywhere DavidR.

Provided you register ownership of the domain name with a net services company authorised to provide that registration. I purchase web services from a company in US or Australia, for example, and simply pay through exchange rate for cross-border ownership. I think some countries may have restrictions in place but I dont actual know for sure. So easy to register most domain name extensions from anywhere and often is easy way to conceal identity or start false premise if want. I think well used avenue for deviant.

Some net services companies will place their own restrictions on registration. For example, I can buy .us extensions from my services company in US and yet I cant register my local extension .co.nz because they don't do it.

On the other hand (unrelated matter), my ISP is provided through local service vodafone.co.nz
On my Hijack This log:
O17 - HKLM\System\CCS\Services\Tcpip\..\{BD43D014-E30E-44E8-A0CE-579457CF61CB}: NameServer = 202.73.206.16 202.73.198.16
I followed up on the entry 202.73.198.16 to substantiate and it put me into subnet of vodafone.net
Avast7 Free, MBAM (on demand), MVPS Hosts

Intel DG41TY, Windows 7 Ultimate, IE9, Google Chrome, 4 GB ram, Secunia PSI, ccleaner, Foxit Reader, Faststone Image viewer, MWSnap.

BabyCharles

  • Guest
Re: why did you state my site as dangerous?
« Reply #7 on: April 28, 2009, 02:24:15 PM »
no no my pc and website clean and server.

problem my site is suspicious by avast

Offline mkis

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1618
Re: why did you state my site as dangerous?
« Reply #8 on: April 28, 2009, 02:33:34 PM »
yes I speak not related to your PC or server.

Just bout domain names and how easy to exploit registration process if want.
Things to be aware of when on the web.  :)
Avast7 Free, MBAM (on demand), MVPS Hosts

Intel DG41TY, Windows 7 Ultimate, IE9, Google Chrome, 4 GB ram, Secunia PSI, ccleaner, Foxit Reader, Faststone Image viewer, MWSnap.

kubecj

  • Guest
Re: why did you state my site as dangerous?
« Reply #9 on: April 28, 2009, 03:14:22 PM »
Because it served rootkit file on 7th of April and because sites with such names are usually used in Bancos scam sites.

BabyCharles

  • Guest
Re: why did you state my site as dangerous?
« Reply #10 on: April 28, 2009, 04:08:03 PM »
i do not think my site is used for scam. as you can guess, if something like this would happen, my hostmaster wouldnt give me host and ban me. i want you to change my ban from avast. what do you want me to confirm to do that?

kubecj

  • Guest
Re: why did you state my site as dangerous?
« Reply #11 on: April 28, 2009, 04:12:20 PM »
Was there file named silkbot.exe in the root of your site? What was its purpose? Were you owner of the domain and the site on 7th of April? Where did the file go? etc...

BabyCharles

  • Guest
Re: why did you state my site as dangerous?
« Reply #12 on: April 28, 2009, 04:30:21 PM »
my ftp password has been changed and when i finally entered i noticed that there were silkbots.exe,config.html and some js files
and all my php files had iframe codes i think it is to run exe on all folders
yes domain was mine at 7th april but i didnt understand what does that change?

kubecj

  • Guest
Re: why did you state my site as dangerous?
« Reply #13 on: April 28, 2009, 04:34:56 PM »
Removed from block (it will take some time to get out in vps), will monitor the situation...

BabyCharles

  • Guest
Re: why did you state my site as dangerous?
« Reply #14 on: April 28, 2009, 04:39:21 PM »
Thanks kubecj