I Have a Big Problem Please Help.

Viruses and worms
1

[font=comic sans ms]Hello,

Anytime that anyone visits our website with Avast installed, they get the following error:

Avast Web Shield has blocked a harmful webpage or file.

Object: htxp://www.devrange.org/

Infection: URL:Mal Process: c:.…

I don’t know what to do … I think my website has a malware. :-\

Please let me know what we can do to unblock our site.

Thank you.

Ryan[/font]

2

Please make the link not clickable and follow these instructions:
https://forum.avast.com/index.php?topic=53253.0

http://trafficlight.bitdefender.com/info?url=http://devrange.org
https://www.virustotal.com/en/url/0bedcc7ba8df369f46f2ae19e10aee9a7f9f9350143e6d04d49e69ee76c5dda9/analysis/1427203520/
http://urlquery.net/report.php?id=1427203717227
http://urlquery.net/report.php?id=1427203742803
https://www.ssllabs.com/ssltest/analyze.html?d=www.devrange.org&s=216.239.36.21
http://dnscheck.pingdom.com/?domain=www.devrange.org

If you believe it is a false positive report it to avast:
https://blog.avast.com/tag/false-positive/

3

There You Are. I Did What You Told Me In The Post.
https://forum.avast.com/index.php?topic=53253.0
Here Are The Files/

4

I Really Need Help. What Should I Do To Mt Site. :frowning:

5

Have patience, a malware remover will soon look at the files.

6

Thanks, I Hope That My Site Be Clean.

7

IP history https://www.virustotal.com/en/ip-address/173.194.195.121/information/
multiple domains on same IP and many are blacklisted … click more button under list(s) for more info

8

What Should i Do … :-\

9

Your computer is clean and the alert is URL which means the site itself has problems

Follow Eddy’s advice about reporting to Avast

10

I Did I Reported.

11

Hello,
there was “devrange.org/y0ilxa3jng.php”, can you confirm that you have cleaned it? I suggest to change all passwords and update all systems.

Milos

12

Actually I Just Don’t Have a File devrange.org/y0ilxa3jng.php … It’s a Blogspot Website.

13

Hi,
We spotted this active URL, as Milos pointed out, which was the reason for blocking the domain: devrange.org/y0ilxa3jng.php.
According to Virustotal, there were similar ones active, which supports the assumption that your website has been hacked. (https://www.virustotal.com/cs/domain/oggendsiekte.devrange.org/information/)

We need you to change all passwords (DNS host, FTP, PHPMyAdmin, MySQL, Admin interface, …), delete all the suspicious files, update all systems you might be using, and then PM me and I will unblock your domain :wink: