help

Hello friends of Avast, I have problem in my site, accuses false positive, but I took all content on the site and also accuses the moment just a banner and yet Avast blocks, podeira someone help me please? :slight_smile:
my dominio is: wxw.freestylemania.com.br

http://tonyvinil.com/imagens/avast%20fmb2.jpg

hey and welcome to the forum. please make the url unclickable so other user can’t click on it by chance it to like wxw instead of www.

according to zulu scan it’s something in the code. avast is alerting on.

http://zulu.zscaler.com/submission/show/8513bb2b24c731b27b6dc7a3d4995d6e-1397714012

I’m no expert hopefully someone more into this will look into this and give you a better answer then i can.

Even Virus Total says it has malware: https://www.virustotal.com/en/url/8808fee9ac14e38a8e21bedc063f9d418c060db1ae4dcab24cb7c69c2bf55508/analysis/

OP: Again, please change your site in your post from www to xxx. so no one clicks on it and gets infected. Thank you.

but the site is no longer on the air, I took only one left banner. he took the air to take the doubt, and yet Avast keeps blocking.

You are on 2 black lists. ESET & Bitdefender.

http://sitecheck.sucuri.net/results/www.freestylemania.com.br/
http://www.urlvoid.com/scan/freestylemania.com.br/

http://urlquery.net/report.php?id=1397726392657

You have out going connections to Porn websites. Why?

The main issue lies here currently. YOu’re connecting to a Known RBN Website IP. (http://urlquery.net/report.php?id=1397693662024). The domain is (thefreshporn.c0m/)

Remove it, and you’ll be better off.

Upon further review. THis site won’t help you either. It contains Malicious Java scipts. http://urlquery.net/report.php?id=1397705308594. Again teid to your website.

You are malvertising as well. RBN Network… http://urlquery.net/report.php?id=1397717397719

More issues Here: http://urlquery.net/report.php?id=1397717391825

You have 5 Malicious websites tied into yours. Some way connected to either porn, The RBN or Java Script. I somehow don’t think this is a False Positive.

Edit: Due to my limited knowledge. I have asked a Site Analyst to come.

The main problem now is that your host is having malicious websites on the same IP/Server.
Although the code of your website now is clean (with only the banner), it could be there was malicious code on your website as well.
I suggest you checked all the code, remove malicious code from it if there is any, put the website back online so we can check it.
If it turns out to be clean you can ask avast to allow your site through the contact form.

A lot of the malware from IP has now been closed or no longer responsive now: http://support.clean-mx.de/clean-mx/viruses.php?sort=firstseen%20desc&review=184.82.133.210
Still the site is classified as an active malware site with malware up by kraken’s virus tracker: www.freestylemania.com.br,184.82.133.210,Criminals,
Site likely compromised: Likely compromised
Site blacklisted by ESET: http://labs.sucuri.net/?eset
What I fetched from site now: http://fetch.scritch.org/%2Bfetch/?url=www.freestylemania.com.br%2F&useragent=Fetch+useragent&accept_encoding=
Doc Style: Rdio FreeStyle Mania Brasil Embedded content images: htxp://www.freestylemania.com.br/imagens/fundo.jpg (FreeStyle)
Only content on site now: imagens/fundo.jpg

Try to get delisted at ESET’s, when clean ask for a domain exclusion on the avast URL:Mal IP detection,

pol

Hello,
there was “freestylemania.com.br/i/last/index.php”, can you confirm that you have cleaned it? I suggest to change all passwords and update all systems.

Milos