Our site causing malware warnings . . .

Our site (www.ottawarenovates.com) is showing that it is malware infected when anyone uses Avast! However, after more than two days of trying every scan and review possible, we haven’t found the problem, which only is reported on Avast. We have the usual wordpress plugins installed, our ISP host ran a security scan, and I’ve worked with a third-party contractor to see if we can find the problem, also.

I’m at a loss.

The two warnings are:

URL: mal hxxp://www.ottawarenovates.com
and
URL; Mal, hxxp://www.ottawarenovats.com/favicon.ico

Can anyone direct me to a solution to solve this problem?d

Hi Publisher1953,

See: http://www.ipvoid.com/scan/50.23.46.235/
And: http://urlquery.net/report.php?id=997197

You can report a false positive here: http://www.avast.com/contact-form.php?loadStyles

~!Donovan

Please ‘modify’ your post change the URL from http to hXXp, to break the link and avoid accidental exposure to suspect sites, thanks.

There is an on-line contact form, http://www.avast.com/contact-form.php?loadStyles for: * Sales inquiries; Technical issues; Website issues; Report false virus alert in file; Report false virus alert on website; Undetected Malware; Press (Media), issues.

  • If you are reporting an FP, then you get another input field open, enter the web URL for the site you wish to submit for review, etc. A link to this topic also wouldn’t hurt.

####
It could be a block on the IP address if there is or was more than one domain hosted on the IP address.

Nothing found here http://sitecheck.sucuri.net/results/www.ottawarenovates.com/.

But this one shows another domain on your IP address that has had multiple alerts (image2), http://urlquery.net/report.php?id=997186, so this may be the trigger.

Site is hosted on a dedicated hostgator server, with several other domains under my control, all of which are doing okay (with possible exception of domain cnrgp.com, where some injection issues have been reported.)

Pending a resolution, I’ve created a new domain and mirrored the content onto it – thousands of dollars in business are at stake so I cannot “wait” for an answer.

I’ve reported using the form, but didn’t reference this thread – should I re-report with the reference?

Reporting is always a good thing,
WP version on your site needs updating: Web application version:
WordPress version: WordPress
Wordpress Version 3.5 based on: htxp://www.ottawarenovates.com//wp-admin/js/common.js
WordPress directory: htxp://www.ottawarenovates.com/wp-content
WordPress theme: htxp://www.ottawarenovates.com/wp-content/themes/art-magazine/

Wordpress internal path: /home/ontarioc/ottawarenovates.com/wp-content/themes/art-magazine/index.php

polonus

It is handy to reference the thread as it gives more information that you are usually able to in a form (contributions of others in the topic), and they may well give a response in the topic.