False positive malware report on website.

[system]

Hi,
I’m a website developer. There is a problem with false-positive malware report (or I think it’s false-positive and I’m wrong). Website is green on most of other online scanner or gray as ‘not scanned’, but still, Avast is blocking it. Is there any problem with the website I don’t know of? Can you check it for me and point what’s wrong? Or reassure me, that it is just Avast security mistake.

URL: antistorm.eu

[Asyn]

→ http://sitecheck.sucuri.net/results/antistorm.eu
→ http://zulu.zscaler.com/submission/show/7807dd86e4b6332f07742d3b288f7ec8-1368854988

You can report a possible FP here: http://www.avast.com/contact-form.php

[jeffersonsant]

@mathmed post:1

Hi,
I’m a website developer. There is a problem with false-positive malware report (or I think it’s false-positive and I’m wrong). Website is green on most of other online scanner or gray as ‘not scanned’, but still, Avast is blocking it. Is there any problem with the website I don’t know of? Can you check it for me and point what’s wrong? Or reassure me, that it is just Avast security mistake.

URL: antistorm.eu

http://my.jetscreenshot.com/18363/20130518-n2uv-63kb.jpg

considered clean According to the results

https://www.virustotal.com/en/url/431a4af1fa4b1bd65190831229b70dcb01c9329de05fe2b8737423e3461cbc7c/analysis/1368886815/

http://quttera.com/detailed_report/antistorm.eu

http://www.urlvoid.com/scan/antistorm.eu/

http://urlquery.net/report.php?id=2531368

http://www.webutation.net/go/review/antistorm.eu

http://wepawet.iseclab.org/view.php?hash=a637f78df521fbaeff5c0eeddd620bdc&t=1368886819&type=js

Reported to analyst

[polonus]

Maybe the detection was based on:

The Windows Intrusion Detection System!
Home | Search

all alerts with 91.227.122.90/32 as: Source | Destination | Source/Destination
show: Unique Alerts | Portscan Events
Registry lookup (whois) in: ARIN | RIPE | APNIC | LACNIC
external: DNS | whois | Extended whois | DShield.org IP Info | TrustedSource.org IP Info | ISC Source/Subnet Report
91.227.122.90
FQDN: (no DNS resolution attempted) ( local whois )
Num of
Sensors Occurances
as Src. Occurances
as Dest. First
Occurrence Last
Occurrence
1 27 27 2013-02-07 05:47:11 2013-04-20 20:53:01

Alert Group Maintenance | Cache & Status | Administration
BASE 1.4.5 (lilias) (by Kevin Johnson and the BASE Project Team
Built on ACID by Roman Danyliw )

[Loaded in 0 seconds]

Also alerted at: http://www.miltonstart.com/
358 websites share the same IP: http://sameid.net/ip/91.227.122.90/
For IP issues see latest reports: http://urlquery.net/report.php?id=2531579

polonus

[jeffersonsant]

@mathmed post:1

Hi,
I’m a website developer. There is a problem with false-positive malware report (or I think it’s false-positive and I’m wrong). Website is green on most of other online scanner or gray as ‘not scanned’, but still, Avast is blocking it. Is there any problem with the website I don’t know of? Can you check it for me and point what’s wrong? Or reassure me, that it is just Avast security mistake.

URL: antistorm.eu

was unblocked in update 130518-1