Avast is bloking my site

Viruses and worms
1

Hi there,

I have received a few calls from providers and other people that could not access to the site because Avast was blocking it.

I have been looking into the issue and looks that there is a potentially suspicious item in the web… I run a few scans and all I could found was this report from chrome that give me a little bit of info.

The problem is the jquery file but is nothing wrong with it…

Could you please let me know what is the solution to it?

Thank you for your help.

Oscar

2

looks clean

http://sitecheck.sucuri.net/results/www.idelights.co.uk

http://zulu.zscaler.com/submission/show/ecdee7eef2ca60c6d0c985ae8c982e45-1363791172

http://www.urlvoid.com/scan/idelights.co.uk/

http://www.mywot.com/en/scorecard/www.idelights.co.uk

reporting to analysts

3

you think this is wrong, you can report it here. http://www.avast.com/contact-form.php
You can add a link to this thread in case answer …

4

Well the IP for that domain has been reported as being a dictionary attacker, so that could be the reason for blocking 85.234.159.57
AS is also listed for Blackhole exploit kit landing pages
Hick up in javascript here:
wXw.idelights.co.uk/includes/fancybox/jquery.fancybox.pack.js benign
[nothing detected] (script) wXw.idelights.co.uk/includes/fancybox/jquery.fancybox.pack.js
status: (referer=wXw.idelights.co.uk/)saved 22643 bytes 3ee291af0f053e3973a2ba60359e4a2132458fc1
info: [img] wXw.idelights.co.uk/includes/fancybox/{href}
info: [embed] wXw.idelights.co.uk/includes/fancybox/
info: [decodingLevel=0] found JavaScript
error: undefined variable jQuery
error: undefined function f
suspicious:

polonus

5

Where have you seen that this IP is reported as blackhole exploit kit?

Thank you.

6

I never said that this IP was blacklisted. I say that other domains from that AS (AS Name: SIMPLYTRANSIT Simply Transit Ltd)
will infect users with Blackhole
See also: https://www.projecthoneypot.org/ip_85.234.159.57
Blacklisted URLs: 35 on AS Name: SIMPLY TRANSIT Simply Transit Ltd

Hosts…malicious URLs? Yes -…badware? Yes …exploit servers? Yes…Current Events? Yes

polonus

7

I have reported the case to Avast a number of times and they have not answered… how long does it take for them to get back?