Site is blocked - what can i do?

Viruses and worms
1

Hi! I have a site that is blocked Avast Antivirus. Customers with installed Avast Antivirus can not go to the site.
Website - www.picbasic.ru
What can I do? How to find a virus or script on the site, because of which the entrance is blocked? As far as I know, there is no virus. thank you

2

→ http://zulu.zscaler.com/submission/show/472b3ffb1d176123ddd57bbaa1f20bb8-1387954636

3

if avast say URL:mal it means your URL or IP is on a blacklist … for whatever reason, it does not have to be infected

quttera say suspicious http://quttera.com/detailed_report/www.picbasic.ru

urlquery http://urlquery.net/report.php?id=8540020
see under Recent reports on same IP/ASN/Domain and you find one URL with detection (allaboutcs.ucoz.ru/) that use same IP as your site

your IP ( 217.199.217.8 ) is also blacklisted here www.apews.org

CASE: C-15 Spambots, zombies, contaminated CIDR, bad reputation provider
4

We get the following flags → Javascript Check: Suspicious

d" href="htxp://www.picbasic.ru/"><img width="24" height="24" src="htx://s8.ucoz.net/img/toolbar_favicon.png?cur_time" />\n<ul id="utbmenucontainer" class="nav">.… blocked in the MVPS Hostsfile!
Included Script: Suspect - please check list for unknown includes
Suspicious Script:
htxp://s8.ucoz.net/src/uwnd.js?2
.ru/i)){g=1;var a=/v=([^\s&;]+)/;var d=a.exec(b.url);if(d&&d[1]){n=“htxp://video.rutube.ru/”+d[1];l=640;f=360}}else{if(b.url.match(/dailym
404 error check: Suspicious

Suspicious 404 Page:
.ru/forum/">ñ�ð¾ñ�ñ�ð¼, ð¿ðµñ�ðµð¹ñ�ð¸ ð² ð°ñ�ñ�ð¸ð² ð¸ð»ð¸<a href="http:

Potential suspicious cde flagged by Quttera’s: http://jsunpack.jeek.org/?report=7b84b776b99527792a48531c1b74b5c64b215bc3
as detected potentially suspicious initialization of function pointer to JavaScript method fromCharCode __tmpvar751850363 = fromCharCode;

bad request returned for: from wxw.picbasic.ru/widget/?5

code hick-up at:s8.ucoz dot net/src/uwnd.js?2 benign
[nothing detected] (script) s8.ucoz dot net/src/uwnd.js?2
status: (referer=wxw.picbasic dot ru/)saved 228800 bytes 0dd32c2a8c5e705fa396074714324206987bf33a
info: [iframe] s8.ucoz dot et/src/
info: [img] s8.ucoz dot net/src/
info: [img] s8.ucoz dot net/img/1px.gif
info: [input] s8.ucoz dot net/.s/img/1px.gif
info: [img] s8.ucoz dot net/.s/img/1px.gif
info: [decodingLevel=0] found JavaScript
suspicious:

This alerted on same IP: http://urlquery.net/report.php?id=7733156 as Detected a Dynamic DNS URL
as connecting out to /infon.php?i=25746 HTTP/1.1
Host: -bestinfon.dyndns.info and this could well have been the reason for the general IP block. So take that up with the hoster,
so they can have that cleansed, close it down or make it is dead! → http://google.cn/safebrowsing/diagnostic?site=bestinfon.dyndns.info/
Most of it now dead or closed: http://support.clean-mx.com/clean-mx/viruses.php?domain=dyndns.info&sort=id%20desc

polonus
5

Thanks for answers. As I understand it, the site is blacklisted avast? I posted a question in the support of the host. I will wait for a response.

6
  1. You’re welcome.
  2. Yes.
7

Hosting support said to me that malicious script and no need to discuss this issue with customer support avast. How can I remove a site from the avast antivirus blacklist?

8
  1. What do you mean…??
  2. You can report a possible FP here: http://www.avast.com/contact-form.php