AVAST Internet Secuirty 2014 blocked my website! Please help me

Viruses and worms
1

Dear Sir,

We are running a site at URL: htxp://www.janjua.tv
Avast! Internet Security was detected it as a malware site, below is report from our users:

Object: hxtp://94.102.49.238/
Infection: URL:Mal
Progress: C:/program

I was running a virus scan on our server and it report fine. Some online checks report good also: Below are details, there is no virus & malware contain on our website. Our website IP is clean and you can check below results.

http://www.siteadvisor.com/sites/http%3A//janjua.tv/
http://safeweb.norton.com/report/show?url=http%3A%2F%2Fjanjua.tv%2F

We have contact our host and they have scanned the server but nothing found. This report is not valid, and someone have reported fake complain against my IP. Due to this i am loosing users.

I request you to please recheck our website, and remove it from your blacklist.

Our website is safe for everyone, it is safe for childrens & it is trusted website. We do not ask any personal data from our users.

Janjua.tv provides its users with an infrastructure which enables each user to share a personal TV channel with an unlimited audience freely and securely.

After creating a personal channel the respective user receives a link with which his/her channel can be linked to a worldwide audience via the Internet.

Please remove it from blacklist and recheck it by yourself.

Thank You,
Best,

2

→ http://zulu.zscaler.com/submission/show/41e2b2db06e10fe11bfa10f99d15e31c-1395139636

3

Ucuri: http://sitecheck2.sucuri.net/results/www.janjua.tv/

You’re website has the Neosloit kit active.
http://www.avgthreatlabs.com/website-safety-reports/domain/janjua.tv/

You’re report is biased. You’ve posted only 1 site, which I find to be unrealible.

4

Hello,
IP was unblocked.

Milos

5

Sir, thank you very much.

Many thanks :slight_smile:

6

No longer flagged by avast, but this IP report still from approx. 3 years ago: https://www.projecthoneypot.org/ip_94.102.49.238
ThreatIP flags IP 45 min ago as belonging to RBN danger level 2, 5 hours ago as AlienVaultScanSpam, threat danger level 2.
4 weeks ago on the DShield blocklist as a threat danger level 3. 5 months ago as TSCriticalG with a danger level 5.
See: http://www.abuseipdb.com/report-history/94.102.49.238
& http://spam-ip.com/lookup-170661-94.102.49.238.html
Historical badness report: http://sitevet.com/db/asn/AS29073

Nameserver test OK: http://dnscheck.pingdom.com/?domain=janjua.tv&timestamp=1395155007&view=1
All test are OK - janjua.tv, 2014-03-18 16:02:15
Test performed via DNSCheck v1.3.0

pol

7

Hi all,

Just another reminder to not fully rely on automated scanning. They are useful, but we must also confirm the results as valid (see Polonus’ response for example). :slight_smile:

Thanks,
~!Donovan

8

Well, finally it’s up to the guys at the lab anyway. :wink: