system
October 9, 2012, 4:08pm
1
It several week your service is reporting our website as infected.
We had clean up from the malware, but your database is not refreshing and some customer report your alert.
We already sent many messages by your contact form (http://www.avast.com/contact-form.php )
Can you please remove the site from avast’s blacklist?
The site is www.mylan.it
https://www.virustotal.com/url/47d3ecebdf8520542aaf6c4e3d6322a046a1c88e3d8b75b8d7723d32e4c3c1ec/analysis/
Thank you
Pondus
October 9, 2012, 4:38pm
2
system
October 11, 2012, 9:06am
3
According to the new report (http://urlquery.net/report.php?id=225192 ) for suricata no reports detected.
Meanwhile for snort we got some trouble…
I don’t understand the meaning of the alert: could someone explain me how to check my website?
Thanks
Pondus
October 11, 2012, 9:26am
4
well seems to have something to do with shockwave flash
anyway if you google snortfilter there are som info to be found…you may find some contact info?
or at sourcefire maybe?
Snort /w Sourcefire VRT (Full license)
polonus
October 11, 2012, 12:17pm
5
See: (script) wXw.mylan dot .it/funzioni/jquery/jquery-1.4.2.min.js
status: (referer=www.mylan dot .it/)saved 72174 bytes 65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b
info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
info: [decodingLevel=0] found JavaScript
suspicious: Bitdefender’s TrafficLight give the site as infected…
polonus