« previous next »
Pages: [1]   Go Down

Author Topic: FALSE POSITIVE WWW.TOSPITAAL.BE  (Read 3525 times)

0 Members and 1 Guest are viewing this topic.

VERCOMBVBA

  • Guest
FALSE POSITIVE WWW.TOSPITAAL.BE
« on: January 14, 2011, 08:32:46 AM »
My website is blocked by avast.
Why ?
Logged

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9412
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: FALSE POSITIVE WWW.TOSPITAAL.BE
« Reply #1 on: January 14, 2011, 11:46:08 AM »
It was probably hacked. avast! hardly ever blocks a page due to false positive.
Flying quickly over the page source and i don't see anything particularly suspicious. I suggest you wait for someone from avast! to check it out and remove detection if found to be false positive.
« Last Edit: January 14, 2011, 11:48:55 AM by RejZoR »
Logged
Visit my webpage Angry Sheep Blog

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76014
    • >>> Avast Forum - Deutschsprachiger Bereich <<<
Re: FALSE POSITIVE WWW.TOSPITAAL.BE
« Reply #2 on: January 14, 2011, 11:49:14 AM »
Report    2010-11-09 22:32:41 (GMT 1)
Website    tospitaal.be
Domain Hash    daf294555d17d1b21cbb713caaa0d736
IP Address    85.119.217.85 [SCAN]
IP Hostname    85.217-119-85.cust.rackboost.net
IP Country    BE (Belgium)
AS Number    35219
AS Name    BE-RACKBOOST-AS Rackboost NV
Detections    3 / 17 (18 %)
Status    DANGEROUS

Sorry, can't provide newer info, as I get this now:
Domain does not exist or is unaccessible.
asyn
« Last Edit: January 14, 2011, 11:52:19 AM by Asyn »
Logged
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline superhacker

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 979
  • superhacker != super mario
Re: FALSE POSITIVE WWW.TOSPITAAL.BE
« Reply #3 on: January 14, 2011, 11:52:35 AM »
Asyn reach before me  ;) but according to norton your website is dangerous because of a virus
http://safeweb.norton.com/report/show?url=tospitaal.be

Code: [Select]
Threat Report
Total threats found: 1

Viruses (what's this?)
Threats found: 1
Here is a complete list:
Threat Name: W32.Koobface
Location: www.tospitaal.be/h3hqdtl7/setup226583.exe

Anubis:
http://anubis.iseclab.org/?action=result&task_id=1bf3edf2773c8d3646929588d599fce30
« Last Edit: January 14, 2011, 11:58:22 AM by superhacker »
Logged
Dreams don't die, they just fall asleep.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89679
  • No support PMs thanks
Re: FALSE POSITIVE WWW.TOSPITAAL.BE
« Reply #4 on: January 14, 2011, 03:54:53 PM »
Avast is generally very accurate on these and isn't alone in considering the site infected, see http://www.urlvoid.com/scan/tospitaal.be. Strange thing it is showing the IP country as Switzerland and an earlier report for the BE IP address.?

Seems you have moved it recently, image2 & 3.

So it looks like a good detection and your site appears to have been hacked (again).
Logged
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD - 27" external monitor 1440p 2560x1440 resolution - avast! free  24.9.6130 (build 24.9.9452.762) UI 1.0.818/ Firefox, uBlock Origin Lite, uMatrix/ MailWasher Pro/ Avast! Mobile Security

VERCOMBVBA

  • Guest
Re: FALSE POSITIVE WWW.TOSPITAAL.BE
« Reply #5 on: January 15, 2011, 05:29:23 AM »
I 've recently moved my website to new vps.
I moved it probably including the virus/hacks
Now,the original website has been erased.
So I made a total new website.

Could you scan my website again please ?
thank you all for help!

Jean-Marie Huys
Logged

CharleyO

  • Guest
Re: FALSE POSITIVE WWW.TOSPITAAL.BE
« Reply #6 on: January 15, 2011, 09:04:36 AM »
***

http://www.UnmaskParasites.com/security-report/?page=www.tospitaal.be

URL:   http://www.tospitaal.be
Redirects:   302 -> http://www.tospitaal.be/web
301 -> http://www.tospitaal.be/web/
Google:   not currently listed as suspicious* (details)
Generator:   Joomla! 1.5 - Open Source Content Management
Last checked:   0 minutes ago (results are cached for 1 hour)


***
Logged

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89679
  • No support PMs thanks
Re: FALSE POSITIVE WWW.TOSPITAAL.BE
« Reply #7 on: January 15, 2011, 03:44:35 PM »
Quote from: VERCOMBVBA on January 15, 2011, 05:29:23 AM
I 've recently moved my website to new vps.
I moved it probably including the virus/hacks
Now,the original website has been erased.
So I made a total new website.

Could you scan my website again please ?
thank you all for help!

Jean-Marie Huys

You can contact avast and ask for this - There is a new on-line contact form, http://www.avast.com/contact-form.php?loadStyles for:  * Sales inquiries; Technical issues; Website issues; Report false virus alert in file; Report false virus alert on website; Press (Media), issues.

Give the details and say it is a detection by the Network Shield blocking access to the site and can they review the domain again, a link to this topic wouldn't hurt.
Logged
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD - 27" external monitor 1440p 2560x1440 resolution - avast! free  24.9.6130 (build 24.9.9452.762) UI 1.0.818/ Firefox, uBlock Origin Lite, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Sirmer

  • Avast team
  • Sr. Member
  • *
  • Posts: 324
Re: FALSE POSITIVE WWW.TOSPITAAL.BE
« Reply #8 on: January 17, 2011, 10:40:05 AM »
Hello,
it will be fixed in next VPS
Regards
Logged
Pages: [1]   Go Up
« previous next »