Author Topic: My website is blocked  (Read 14201 times)

0 Members and 1 Guest are viewing this topic.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: My website is blocked
« Reply #15 on: April 17, 2010, 09:18:13 PM »
Asyn, I looked at those topics before writing this, again, no help. The JS just isn't there, and apparently this is now a blacklist issue not an active detection issue.

Once blacklisted it could take some time...
It would be interesting, how long exactly!
So, please could you post back here, if the issue is solved..!??
Thank you! :)
asyn
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline nmb

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3054
Re: My website is blocked
« Reply #16 on: April 17, 2010, 09:21:18 PM »
To the best of my knowledge, Avast doesn't use a blacklist.
You sure? I dont think so..

nmb

Offline Simion

  • Advanced Poster
  • **
  • Posts: 976
Re: My website is blocked
« Reply #17 on: April 17, 2010, 09:26:32 PM »
To the best of my knowledge, Avast doesn't use a blacklist.
You sure? I dont think so..

nmb
Well, I'm not really sure. But since Avast is actually detecting malware it doesn't sound like blacklisting.

Also, in Avast 5 the detection is listed in both Web Shield and Network Shield.

spg SCOTT

  • Guest
Re: My website is blocked
« Reply #18 on: April 17, 2010, 09:27:11 PM »
From what I remember, a blacklist is (at least) partly how network shield works...

FWIW I also get a network shield block of this site with 5.

-Scott-

dmarkd

  • Guest
Re: My website is blocked
« Reply #19 on: April 17, 2010, 09:29:36 PM »
Even in avast 5, network shield blocks it, but if you disable network shield, you will then get the trojan error itself. So I'm getting this multi-pronged block against the site and I have no idea why.

If it is not a blacklist, what exactly is it finding wrong with the index.html containing nothing but "Sup" ? Even using a telnet session to the page to inspect the headers shows nothing out of the ordinary.

This is getting pretty frustrating.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: My website is blocked
« Reply #20 on: April 17, 2010, 09:35:58 PM »
Please PM me the index.html
asyn
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

dmarkd

  • Guest
Re: My website is blocked
« Reply #21 on: April 17, 2010, 09:43:46 PM »
Please PM me the index.html
asyn


Apparently I'm not allowed to send PM's.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: My website is blocked
« Reply #22 on: April 17, 2010, 09:52:02 PM »
Apparently I'm not allowed to send PM's.

Sorry, forgot about that... You need 20 posts first. ;)
But you could attach it to a post... (rename it to something like dmarked.999)
asyn
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Simion

  • Advanced Poster
  • **
  • Posts: 976
Re: My website is blocked
« Reply #23 on: April 17, 2010, 10:07:03 PM »
From what I remember, a blacklist is (at least) partly how network shield works...

FWIW I also get a network shield block of this site with 5.

-Scott-
Thank you for confirming that.

Offline Simion

  • Advanced Poster
  • **
  • Posts: 976
Re: My website is blocked
« Reply #24 on: April 17, 2010, 10:08:05 PM »
Web Shield alerted for JS:ScriptPE-inf [Trj] (0) at 2:40:46 PM EDT, which is apparently before you replaced the forums. Currently, only Network Shield is blocking it.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: My website is blocked
« Reply #25 on: April 17, 2010, 10:12:18 PM »
Web Shield alerted for JS:ScriptPE-inf [Trj] (0) at 2:40:46 PM EDT, which is apparently before you replaced the forums. Currently, only Network Shield is blocking it.

I can confirm that - only Network Shield is blocking it here at time of posting...
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

dmarkd

  • Guest
Re: My website is blocked
« Reply #26 on: April 17, 2010, 10:17:32 PM »
Here is the current index.html and the old index.html from the forums. For completeness' sake, I've also included the index of the template file the forum was using.

On a side note, I received an e-mail back from Avast - they said they were seeing many reports from a url "downloadnow.9thlevel.ca" and blocked my entire domain. Downloadnow is not a valid subdomain of mine nor is my webserver configured to host it, so I'm guessing that the issue was a dns injection / wildcard issue which caused the report in the first place. Unfortunately it is not an issue I have any control over nor do I apparently have any ability to fix it. Anyway, their response was that they have modified the block to be the subdomain only, so hopefully when I get my next update that will solve things.

Update - I host my DNS with a service called "FreeDNS.afraid.org" - one of their options is to allow other people to use your domains for their own subdomains and point them elsewhere. I am SUPPOSED to be notified when this happens and be able to approve/deny domains. I had no such notification and as I cannot resolve this "downloadnow" name I'm not sure if this is the issue, but it is possible their was a fault in their system which has caused this confusion. Not guaranteed that this is it, but at this point it seems to make the most sense.
« Last Edit: April 17, 2010, 10:29:40 PM by dmarkd »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: My website is blocked
« Reply #27 on: April 17, 2010, 10:49:11 PM »
Update - I host my DNS with a service called "FreeDNS.afraid.org" - one of their options is to allow other people to use your domains for their own subdomains and point them elsewhere. I am SUPPOSED to be notified when this happens and be able to approve/deny domains. I had no such notification and as I cannot resolve this "downloadnow" name I'm not sure if this is the issue, but it is possible their was a fault in their system which has caused this confusion. Not guaranteed that this is it, but at this point it seems to make the most sense.

Maybe...
I never could accept the rules you posted above. :(
All kind of troubles can easily occur...
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

YoKenny

  • Guest
Re: My website is blocked
« Reply #28 on: April 17, 2010, 11:12:15 PM »
I'm using avast 4 and network shield blocks it  ???

nmb
Why are you not using avast! V5?

Hermite15

  • Guest
Re: My website is blocked
« Reply #29 on: April 17, 2010, 11:22:19 PM »
The JS just isn't there, and apparently this is now a blacklist issue not an active detection issue.
To the best of my knowledge, Avast doesn't use a blacklist.

I think the network shield does...