Avast FP is hitting my website business

Viruses and worms
1

Hi Avast Team,

A false positive has been blocking my website for a long time. I have reported this months ago on avast 2015 “Report as False positive”. I am losing huge traffic because of this. Total scan shows 0/63. Google shows clean. Please rectify. Here is the total virus scan link

https://www.virustotal.com/uk/url/404cf3150516dbc8c7d4e2dc9fcda8600fd362ea953985f089fc78dbc2a5c9f7/analysis/1433763077/

The hosting team has scanned the server loads of time and found nothing.

2

Hi,
Which domain on that IP is it exactly?

3

IP history https://www.virustotal.com/en/ip-address/162.253.224.10/information/

4

Ive got many Domains

coloradospringsroofing.info
sleepsciencemattress.net
transformationarena.org

5

162.253.224.10 resolves to “so7.infinitysrv.com”
Top Level Domain: “infinitysrv.com”

http://urlquery.net/report.php?id=1433800516676
http://urlquery.net/report.php?id=1433800570652
https://sitecheck.sucuri.net/results/transformationarena.org
http://multirbl.valli.org/lookup/162.253.224.10.html
http://dnscheck.pingdom.com/?domain=transformationarena.org
https://www.ssllabs.com/ssltest/analyze.html?d=transformationarena.org

VirusTotal does not scan sites.

6

These are for coloradospringsroofing.info:

https://sitecheck.sucuri.net/results/coloradospringsroofing.info
http://quttera.com/detailed_report/coloradospringsroofing.info

7

This is the end of coloradospringsroofing.info: (I made the URLs non clickable)

<iframe src="http://www.sleepsciencemattress\.net" style="width:1px; height:1px;"></iframe>
<iframe src="http://coloradospringsroofing\.info/adsloader1.html" style="width:1px; height:1px;"> </iframe>

<iframe src=" http://www.amazon\.com/?tag=wwwcolorado0a-20" width="1" height="1"></iframe>

</body>
</html>
<p style='display:none'>5d90ea4a168e0bc816c8baf2f47967f4aa4d9f94</p>

I believe it will be the same for other domains on that IP…

8

Thanks. but those iframes are my website urls. Why is it detected as Malware?

9

Exactly. You have iframes leading to malicious/spammy sites on your website. This means your website is infected.

10

Why do you want those url’s to be opened without the user noticing it…
That is malicious practice.

It is also falsely generating visitor statistics.

Also are IFrames obsolete/depricated:
http://www.w3.org/TR/html5/obsolete.html

11

Thanks I have removed them. I only wanted to increase traffic count. I didn’t know this will be reported as malware. When will this be back to normal ?

12

I don’t think people do want to visit your websites.
At every click 2 pop-up’s :frowning:

13

Hi Eddy,

I provide a free Website Link service on my PR websites. This usually costs $2 - $299 (Magenet and Backlinks dot com)per month but I offer it free. So my popunders and popups views are only way to pay for my hosting and save a little. Even with this users flock to post their link; atleast 150-300 posts everyday.

I understand the iframe (to increase my visitor count) was detected as malware. I have removed them. Now how do I get the next update to clear this website from Avast Malware reports?

14

Have patience.

avast will soon have another look at the websites and if everything is fine, they will allow them again.

15

Hi footman.88,
I am unblocking your domains now. Keep in mind though, that they will be very easily blocked again if you use those tactics, and then we will not be so quick to unblock them.

This is a very dangerous thought, and I shudder just by thinking of it. I hope you can find a better system of monetization - one without exploiting your users - or start working to pay for hosting, as we mortals do.
Honza