FALSE POSITIVE - BLACK LISTED

Hello Avast Team.

We are having so many issues with your software. I’m the webmaster of few websites and this website in particular is been detected with viruses with your software and I’m so sure about this false positive been made by you! I’m getting in trouble because your software and very close to been sue by the owners and they are also losing money, reputation and users because of this problem!

I had download the entire website and scanned with your software and yes few files were detected and when I look at the codes had nothing to do with hacks or viruses they were just simple codes not in use but left there for future use if need it, any ways I remove all those codes and did a new scan with your software and had no negative results this time (still they were false positive before) But the website still black listed by your software and the owners are having a huge presentation by December 7th 2011.

I ask you kindly to please give me some advice in the matter and also remove the website in question from your black list.

I cannot add the domain address in this public forum because of its nature and privacy. But more than happy to send it to a private message to whomever is whiling to help me. Thank you.

Sincerely Hieloiceberg.

http://www.avast.com/contact-form.php?loadStyles

I already did Asyn but not sure if it went through! and already talk to few people on the phone but they do not give me the help I need since they just think is an issue with the software in my computer,is there a phone number so I can talk to the developers or programmers about their database or something.

I’m so frustrated with this issue.

Thank you.

Contacts: http://www.avast.com/contacts

Hello,
you can post here website’s urls (put hxxp before instead of http) and detection names.

Milos

Thanks for joining the topic Milos…! :slight_smile:

The website has adult content that’s why I’m not sure if I can type the link here, let me know if I can please!

Thank you.

Yes, follow Milos’ instructions.

This was blocked on last day of June, together with other fake dating services. One of them distributed trojan clicker, which, without the user’s knowledge clicked on the adverts on such pages. Lots of links to such sites were blocked. So - there is (was) malware which has links to pages on your site embedded.

Symantec blogged about it http://www.symantec.com/connect/blogs/sgt-scammer-s-lonely-hearts-club

Good evening,

I have just spoken to one of your very friendly customer support from avast and i was told to send an email to avast support since this is a very urgent issue.
My website was blocked on last day of June, together with other fake dating services. Apparently one of them distributed trojan clicker, which, without the user’s knowledge clicked on the adverts on such pages. Lots of links to such sites were blocked. After i contacted you guys and was told that i went ahead and paid someone to check all my files for malware…( EVERYTHING’S CLEAN NOW ), also my hosting ( Hostupon ) checked the server , investigated for weeks and nothing bad in it, all is CLEAN. I also did a SCAN with GOOGLE and google says that my site is perfectly clean. I am losing alot of money and not to mention the reputation of my domain, and that’s not good at all. My hosting told me to contact you asap because you guys have my domain hxxp://bearground.com in your blacklist. This is nerve breaking because it´s a huge website in europe with lots of money in it and huge presentations and we cannot afford something like this. I understand that for security you guys block malicious website but as i mentioned, the website has NOW BEEN CLEAN by professional malware remover programmers, My page DOES NOT HAVE ANY BAD FILE ANYMORE and i would thank you so much if you guys please add my domain to your database so that members can start login to my page.
I have a huge presentation on the 7th of December with over 3000 people, please can you guys give me a solution to this.

Thank you so much,

Waiting for your reply.

Best regards,
Luis Martins

You know what is fun - I heard the same story from about 6-7 sites since I blocked the whole trojan-clicking-on-adverts-on-dating-websites network. This can’t be coincidence - the purpose of trojan-clicker is to give your site more impressions = you get more money from advertisements.

Kubecj, keep blocking this kind of sites please :slight_smile:

From reading between the lines, I guess he will. :wink:

You know what is fun - I heard the same story from about 6-7 sites since I blocked the whole trojan-clicking-on-adverts-on-dating-websites network. This can’t be coincidence - the purpose of trojan-clicker is to give your site more impressions = you get more money from advertisements.

I have install AD MANAGER PRO and my site is 100% free including the banners…you guys are not giving me a solution to this…and all my banners are from bars, discos, magazines that we exchange banners only, i check the links before i add them to make sure they are clean…what if i remove the ad manager pro??? Can i get my website unblocked?? I don’t wanna have to get to legal actions, this is not a HOBBY or a small website that i am doing just for fun…its alot of hard work and like i said, its a contacts website, with lots of money in it. Please can someone from AVAST respond and tell me what the solution to this is??? It is getting frustrating since i have been trying to get my website unblocked for months now.

I understand the issue, but this was from before from june, now my website is fully clean, you can scan it if you like, i have ad manager pro installed and all my banners, all links attached to it are scanned with avast before i add them…I need my website hxxp.bearground.com unblocked asap , i have a huge website presentation in 3 days like i said, with over 3000 people and this is getting on the way, please can u remove my website from your blacklist…I don´t know what else to do, this is nerve breaking.

Thank you,

Luis

Has been unblocked, thank you so much guys, from now on i will make sure that i check my website banners, links etc everyday lol.

Thanks again

I am having exactly the same problem. Here are my current banned domains. They are hosted in my vps.
hxxp://blancomartin.cl (odoo software)
hxxp://blancomartin.com.ar (bootstrap site, scanned with freshclam since it is linux).
hxxp://superracks.cl (odoo software) I have recently informed as false positive blancomartin.cl, but now response by you.

Yoy are making a huge harm to my reputation.

Hello Daniel427,
all the listed domains use afraid.org for DNS hosting.

Any domain hosted on afraid.org can be used by other persons for dns hosting without your control. It happened for your domain, it was misused for malicious purposes - in that case, when nobody has control on subdomains of domain (DNS hijacking), we block the whole domain in order to protect our users. For you, the solution is most probably only changing the dns hosting and letting us know later.

Milos

This site does not seem blocked by Avast Webshield: http://www.olihargon.com/
Nameserver test OK: https://dnscheck.sidn.nl/?time=1426172163&id=1801638&view=basic&test=standard
4 Problems
Category Host Result
https olihargon.com The Certificate has a name mismatch
dns olihargon.com Local NS list does not match Parent NS list
dns olihargon.com SOA Expire Value out of recommended range
smtp olihargon-com.mail.eo.outlook.com May be an open relay.

pol