today i'm received avast report but what i do?

General Topics
1

hi guys,
i was sent message to avast for my site
and this a message

Dear sir,
the avast antivirus report my site as and block it.
please remove the block from my site ,
as it clean and safe for browsers.
my site is sitename.com/
best regards …

and this avast reply
Hello,
there were detected many random subdomanis:

073c832e84b5d2a801902413013021574293542b1d4baafe3ca818463a63e93.sitename.com
073c832e84b5d2a8119161130130212492944930208587dcc733aabe7bf917c.sitename.com

It looks it was hacked and infected. Can you confirm it was cleaned?

Best regards,
Milos Hrdy
Virus analyst

=============================
and when i enter to this subdomain … not found anything

so what i do ?

2

Are those sub-domains that appear to be randomly generated really a legit part of your site ?
If not (then as Molis says your site was probably hacked) you are going to have to clean them out and you will probably need help, probably from your site HOST.

You need to speak to your domain HOST about this possible infection/hack as this is commonly as a result of a vulnerability being exploited. e.g. old versions of content management software, PHP, joomla, etc.

You can check some of the analysis sites, http://sitecheck.sucuri.net/scanner/, http://urlquery.net/, http://urlvoid.com/ and enter your domain and see what they bring up.

3

Or you can just use Scanurl.net to have many of them in one page.

So lets look over this. :wink:

4

Can you give us the URL of the site so that website analysts can look over this and help you?

5

Posting a “live” URL is asking for trouble. Especially if the link “is” infected. Some unknowing user could click then get infected.
The best thing is to follow DavidR’s advice. :slight_smile:

6

thanks for all
my site now isn’t infected i was deleted all SHELL on my site
and this report from http://urlquery.net/report.php?id=4751543 about my site
and this report from
http://scanurl.net/?u=http%3A%2F%2Falshahbaa.com%2F&uesb=Check+This+URL#results
look , it’s clean …
so what i do now …
Avast sent false report ?

7

You can report a possible FP here: http://www.avast.com/contact-form.php