Infection:URL:Mal, please help!!!

Viruses and worms
1

Hi, I have a problem where my avast is going crazy telling me,and my website has been blocked,It keeps happening when we try to open my site, my site link is www. malltop1.com,i tried many ways to resolve this issue, but it’s not work, crazy me!!, i test my site on many other virus softwear have not find the problem, for example McAfee,Symantec…etc,only Avast blocked my site!!,please help me with this,what’s problem with it?

in the attachment have the alert details pictures,

please help me with this and tell me how to fix this problem?

Many thanks
Jacky

2

To begin with the site has a bad web reputation: http://www.mywot.com/en/scorecard/malltop1.com?utm_source=addon&utm_content=popup-donuts
Given clean here: http://sitecheck.sucuri.net/results/www.malltop1.com
and here: http://urlquery.net/report.php?id=391653
Sucupicious file detected by Quttera scanner:
us03.lockview dot cn/Js/lockview.js?uid=LK5341197
File size[byte]:
13007
Severity:
Potentially Suspicious
Details:
Suspicious JavaScript code injection.
Reason:
Procedure: + has been called with a string containing hidden JavaScript code .
MD5:
F1C55B93F375767367F9485F1DDF55F7
error in the html document: Line 10, Column 152, Damage XML_ERR_NAME_REQUIRED
Some indication fro SEO Blackhat SEO Spamming and content spamming for the IP at honeypots…
see: http://hosts-file.net/default.asp?s=184.82.200.6

polonus

3

hi polonus:

thank you so much,

we will change a ip and remove the lockview.js for check first.

but what’s your meaning for "F1C55B93F375767367F9485F1DDF55F7 error in the html document: Line 10, Column 152, Damage XML_ERR_NAME_REQUIRED "???

waiting for your reply

thank you
Jacky

4

hi,

the IP was changed and the lockview.js also removed,
i also test on this page:
https://www.virustotal.com/url/8a17a185a0ac94a544f587e82b3399830205f4ccee3bbdbd10ded14f0ee12990/analysis/1355382259/

and there have not find any virus problem on it. my site is a clean site.
but the Avast still is blocked my site yet,
im not understand now.

please help.

thank you so much
Jacky

5

You can report a possible FP here: http://www.avast.com/contact-form.php?loadStyles

6

hi Asyn, can you help me this? i just sent the report to Avast. hope they can reply back to me soon, and can you help me with this? so many of our customers said our website is blocked and can not visit our site, and we don’t know how to fix it now.

thank you

7

As you reported it now, the guys at the viruslab will check it. :wink:

Edit: http://zulu.zscaler.com/submission/show/81253ab4b731271e890ec967730fd81c-1355384771

8

it there have anybody can help me? i reported to avast, but still now have nobody replied to me.

it’s crazy me!!!

9

PM sent to virus analyst regarding this…Hoping response. :wink:

10

i tested, only avast said my website have the problem!! very stange, and i submit a ticket to Avast support, not 5 days pasted and not anybody give me a response!! very sadly!