Avast is Blocking my website, what should I do?

Viruses and worms
21

I don’t understand what is malicious in social comments script of social network Vkontakte.ru???

22

Hi BANDITiT600,

There is a world of difference from some part of the code being found as probably suspicious and code being malicious, so malcode as such.
It would be welcomed if you could provide us with an image as what is specifically flagged by avast.
Sucuri does not give any warnings on non-updated, non-patched code. That is great.
vkontakte is your counterpart of facebook and facebook has loads of isues…
But if you think this could be a false positive, report to avast, report here: http://www.avast.com/contact-form.php?loadStyles

Also consider this: hxtp://vscan.urlvoid.com/analysis/9b2a7b3651476cd8d33fc29a75be2a83/YWpheC1qcw==/ given clean

polonus

23

Here is screenshot.

And BTW, vscan.urlvoid.com says everything is clean.

24

Hi BANDiT600,

You can report a possible FP here: http://www.avast.com/contact-form.php?loadStyles

polonus

25

Yes, thank you. I have reported about it yesterday, but still no answer.

26

hi there!

i have the problem, that avast blocks my website for no reason :confused:

i checked already everything on the page for bad files etc. but everything is clean!

could you unblock my page please - it would be nice if it happens as fast as possible: http://boulderwelt.de/

27

Please ‘modify’ your post change the URL from http to hXXp or www to wXw, to break the link and avoid accidental exposure to suspect sites, thanks.

This is the Network Shield blocking your site as it is considered malicious.

Sucuri shows clean, http://sitecheck.sucuri.net/results/boulderwelt.de/ as does http://urlquery.net/report.php?id=82943. But it looks like their might be other domains on this IP also, you are possibly being blocked by IP rather than domain name.

There is an on-line contact form, http://www.avast.com/contact-form.php?loadStyles for: * Sales inquiries; Technical issues; Website issues; Report false virus alert in file; Report false virus alert on website; Undetected Malware; Press (Media), issues.

  • If you are reporting an FP, then you get another input field open, enter the web URL for the site you wish to submit for review (Network Shield), etc. A link to this topic also wouldn’t hurt.
28

This is a hick-up in the code:
boulderwelt dot de/plugins/bgstretcher/bgstretcher.js benign
[nothing detected] (script) boulderwelt dot de/plugins/bgstretcher/bgstretcher.js
status: (referer=boulderwelt dot de/)saved 20520 bytes 9bc81219597dc7d0ade629522c6f1e1add14472f
info: [img] boulderwelt dot de/plugins/bgstretcher/
info: [decodingLevel=0] found JavaScript
suspicious:
Nothing here: http://wepawet.cs.ucsb.edu/view.php?hash=2e3bfc22fb5b9010edf1e88c4b1b166d&t=1341493569&type=js

polonus

29

Hi I am also getting the Avast Blocked Messages in my site wxx.listacasa.com

We have scan everything and its OK. Please we need your help to resolve this.

Thanks!

30

If you scanned using the sites above http://sitecheck.sucuri.net/scanner/ and http://urlquery.net/ and they also come up clean then reported it as outlined in my Reply #1 above.

I see nothing reported on Sucuri SiteCheck or URLQuery.net.

However, it looks like your host has other domains on this IP address so it could be that one or more of those is infected and the IP address is blocked, which effects your domain.

31

Hi BANDiT600,

Everything seems fine now,

Stay safe and secure,

polonus

32

Hi David, in that host there’s only One domain… so how can that be happening, please help!!!

Thanks

33

Use the URLQuery.net and you will see there are other domains associated to the IP.

34

Not sure who you are responding to no user of that name in this topic ?

35

Hi David, this is what I get from my host provider:

That domain is not hosted on your machine or IP, or even on our network. Can you ask them to clarify? There is currently only one account on your VPS, and your VPS IPs are not shared, you have sole and complete control over every bit of content on the IPs assigned to your VPS. If you can get us further information from Avast as to why your site is blocked we can scan it further for you, but a malware and virus scan both came back perfectly clean on your account.

Any help would be appreciated!

36

As I said The information is available through the urlquery.net, that is where I got it. I don’t know how they make the associations, could be historic data on what may previously have been on it.

So I recommend that you use the contact form, if you haven’t already done so and submit it for review and let avast review it again.

37

Could have been a FP because of ls/index.php? refresh content…

polonus

38

Hi

Everything has been resolved, thanks to DavidR and Polonus!!!

39

You’re welcome.