Hello,
My site hxtp://kvnbest.ru is in the avast black list. This site has been tested and does not contain viruses.
http://www.unmaskparasites.com/security-report/?page=kvnbest.ru
Please help to exclude a site from the black list.
If you’re certain it’s clean you can report as false positive:
http://www.avast.com/contact-form.php?loadStyles
And what does avast say?..a screenshot of the warning may help
urlquery give a ISD alert
http://urlquery.net/report.php?id=623232
Hi Pondus.
I think this is IP related because of a long overdue JS/Blacole.O detection on an url domain for that IP ->: http://wepawet.iseclab.org/view.php?type=js&hash=20ecd55b3af07a78b06d65d0326b2b0b & →
https://www.virustotal.com/file/6a640db20a52065b54de054e9af728c381f04d733a552fedcaec37ebd8411b2c/analysis/
Malware alive and active since: 2012-08-06 12:00:59 status: OVERDUE! Overdue! active for over 3681.1 hrs. (data from VirusWatch):
Re: http://urlquery.net/queued.php?id=8050508. For the Suricata&Snort IDS alerts there, see: → this link on GMane from Balasubramaniam Natarajan : http://comments.gmane.org/gmane.comp.security.ids.snort.emerging-sigs/17692 (commented Oct 1st 2012 by Matt Jonkman for EmergingThreats pro Snort ruleset)
polonus
IE:
http://3d-free.ru/files/01_network_shield_ie.png
After Stopping Network Shield (Yandex Browser):
Also get this firekeeper IDS-alert for that site, details: === Triggered rule ===
alert (msg:“The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information”; url_content:“http://web.archive.org/”; reference:url,www.malwarepatrol.net; fid:350030; rev:20130107135342;)
=== Request URL ===
http://web.archive.org/web/*/kvnbest.ru
see: http://urlquery.net/report.php?id=630304 (IDS flag for exploit kit’s filemagic macromedia flash exploit
polonus
Hello,
it should be fixed from yesterday.
Milos
Thank you all! My site was removed from the blacklist.