Site blocked by avast- MAL:Url - but can't find any infection

Viruses and worms
1

Hi guys,

Currently getting MAL:Url on http://www.pcgamerhome.com but I can’t seem to find the infection.

If anyone has any idea what might be triggering it would appreciate some pointers.

2

do you mean in your computer …or on that website?

if you get repeated popups when not doing anything, it indicate a infection in your computer

MAL:url means the URL or IP is on a blacklist

blacklisted by Bitdefender http://www.urlvoid.com/scan/pcgamerhome.com/

3

It’s my site, I can’t visit it in my PC. The avast seems add it to its blacklist.

4

You can report issues to avast here : http://www.avast.com/contact-form.php (select subject according to Your case)
you may add a link to this topic in case they reply here

5

Hi,
Thank you, I’ll try, I don’t know what make this, so I have replaced the web host and reinstall my site today. should I contact bitdefender to solve the problem? Thank you. :slight_smile:

6

http://zulu.zscaler.com/submission/show/2b5b4ecdfa56ce4044f2f2b5fd0f35e9-1389871473
http://urlquery.net/report.php?id=8838790

The problem is that malicious websites are hosted on the same IP.
If you believe that website should not be blocked, ask avast to unblock it by using the link Pondus gave you.

EDIT:
Please make the link not clickable.

7

And if you want it removed from Bitdefender list you need to contact Bitdefender

8

Well an external link going here was being blocked: htxp://www.51.la/?15662355 by an extension for me.
See realtime malware from there: http://support.clean-mx.de/clean-mx/viruses.php?sort=firstseen%20desc&domain=js.users.51.la
which is now most closed or dead, but could have been flagged earlier and led to the Bitdefender TrafficLight block.
External link given clean now: http://urlquery.net/report.php?id=8840089

pol

9

Thanks all, I have contacted bitdefneder, and they have removed my site from their blacklist, I hope avast will remove my site from their blacklist soon. :slight_smile:

10

This is the script in question:


Code: [Select]
<a href="htxp://www.51.la/?15662355" target="_blank"><img alt="&#x35;&#x31;&#x2E;&#x6C;&#x61;&#x20;&#x4E13;&#x4E1A;&#x3001;&#x514D;&#x8D39;&#x3001;&#x5F3A;&#x5065;&#x7684;&#x8BBF;&#x95EE;&#x7EDF;&#x8BA1;" src="htxp://icon.ajiang.net/icon_9.gif" style="border:none" /></a>

htxp://icon.ajiang.net/icon_9.gif is also being blocked → http://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Mal~GamBee-A/detailed-analysis.aspx
There is spyware detected on site! Trojan Clicker based on wXw.icon.ajiang.net redirecting to htxp://icon.ajiang.net/
malcode on for 826.1 hours → http://support.clean-mx.de/clean-mx/view_virusescontent.php?url=http%3A%2F%2Fwww.icon.ajiang.net%2F
11004 [11004] Valid name, no data record (check DNS setup)

polonus

11

Yesterday, I have report the issues to avast on: http://www.avast.com/contact-form.php, but why no reply?

12

Because there is no reason to reply.
avast will investigate it and if/when needed they will fix things a.s.a.p.
They only will contact you if they need/want more information.