Fix URL:MAL on a safe domain

Viruses and worms
1

Hello,

I’m maintaining a website (http://wXw.isialm.com) that is blocked by AVAST with a URL:MAL alert. The website has been rebuilt two years ago and is safe from this date.

I checked blacklist servers without result (http://www.urlvoid.com/scan/isialm.com/).

I’m trying to white-list it but I don’t know how to do.

Any help is appreciated.

2

Hi dduez980,

Possible flagged because of this earlier detection: http://urlquery.net/queue/8c1616af-4b04-4d90-9e60-68b977d4db03
for range request: multipart/byteranges; boundary=00000000000000028241 so-called Google redirect virus?

Files Referring Date scanned Detections File type Name 2017-01-09 1/54 PDF ProgrammeForum20170117v4.pdf

If that is no longer there, wait for an avast team member to come to unblock,
as we are volunteers with relevant knowledge, but cannot unblock.

polonus (volunteer website security analyst and website error-hunter)

3

Hi polonus,

Thanks for your help.

I’m trying to understand ???. The report you linked is on a pdf file (plaquette_2017.pdf) but in your quote it’s another one (ProgrammeForum20170117v4.pdf). I’m unable to locate the second one or any reference to it.

The file plaquette_2017.pdf just looks fine to me. How can I make sure? Should I remove it?

4

Hi dduez,

I have been alerting an avast team member to look into the pending detection that causes the block,
and we better just wait when one of them shows up to give the final verdict.

The VT scan of that pdf file you mention comes clean.

By the way I have found an additional error in the following script code

wXw.isialm.com/sites/default/files/js/czBmOELM7KqVqNkyjJqLj1yEm9UjwOd1BMn0VD2kWXY.js
info: [decodingLevel=0] found JavaScript
error: undefined variable jQuery
error: undefined variable Drupal
error: undefined variable Drupal.behaviors
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var Drupal.behaviors = 1;
error: line:1: …^
To be without kickung up this error, it should run after the settings are available (pol)

polonus (volunteer website security analyst and website error-hunter)

5

Hi guys,
URL block was disabled.

Regards,
Lukas

6

:slight_smile:
Thanks LukasJ for unblocking and Polonus for your precious help.