holylandunveiled.com incorrectly shows malware

[cox573]

Avast is incorrectly blocking access to holylandunveiled.com saying there is malware when there is not.

[ArminPasalic!]

You can try to exclude the Website.


Open avast!
Click on REAL-TIME SHIELDS
Click on Web Shield, click on the Expert Settings button
Click on Exclusions, pres the F1 key to get help with exclusions:

On this page you can specify URLs and MIME types that should not be scanned by the Web Shield. This can be useful when downloading a large number of files from a single, trusted source.

URLs to exclude - Use the "Add" button to enter the URL addresses that should be ignored. If you want to exclude only a single page, you need to enter the full address e.g. you would need to enter the full address http://www.yahoo.com/index.html if you want to exclude the page index.html. However, if you enter http://www.yahoo.com/* no pages starting with http://yahoo.com will be scanned. If you want to exclude a particular file type from being scanned, e.g. files with a ".txt" extension, enter *.txt.

MIME types to exclude - Here you can specify any MIME types/sub-types that should not be scanned.

[cox573]

I thought it was interesting that a website critical of Israel was being blocked by avast. I think this needs to be escalated to determine why or who in your organization wants that website blocked.

[ArminPasalic!]

This isnt Avast! blocking the Website - This decision MAY not be taken by the company. It can be called FALSE POSITIVE.

Meaning, the Engine is blocking the Site by a mistake. I'm sure Avast! will fix this False Positive.

[DavidR]

Avast is incorrectly blocking access to holylandunveiled.com saying there is malware when there is not.

I hate to burst your bubble but the page has been hacked, check the noframes tag it even has a hidden iframe (ironic or moronic) in it, see image1.

Avast isn't alone in thinking this, http://www.virustotal.com/file-scan/report.html?id=79a6cd977d4e6fbbf12150b74d2c91491b80b46a92a1072bdf5cfc54f68050a6-1287747916.

It is no doubt point to a malicious site and using port 8080 to try and avoid scanning by some AVs. Avast alerts on this redirected page, as does firefox safe browsing, images 2&3.

So it has nothing to do with the content of the site but malware.

[ArminPasalic!]

I also thought about it.

[DavidR]

I also thought about it.

Then suggesting he exclude the page would leave them open to attack, not good.

[ArminPasalic!]

My Avast! doesnt block it. :S

[DavidR]

That may depend on a) your avast version, b) your browser, neither of which we know as you don't have that information in your signature.

[Sirmer]

Hello,
this is not a false positive.
Best regards
Jan Sirmer