URL:Mal Chrome, IE, Firefox

Viruses and worms
1

For several days I’m having problems with my site ledahost.com

Avast detects it as if I had some kind of virus blocking access to the site, have reviewed by the support but did not find any virus, I am reported to Avast false positive but got no answer.

Any help?

2

Hello,

Please follow this topic and attach required reports

https://forum.avast.com/index.php?topic=53253.0

3

My apologies, I have attached the logs as requested in that post.

4

https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:

createsrpoint;
chrdefaults;
bitsadmin /reset /allusers;b
C:\Users\Kevinex\AppData\Local\Google\Chrome\User Data\Default\Preferences;f
autoclean;
emptyalltemp;
ipconfig /flushdns;b

[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

5

This is the result, is attached.

6

Good. How is the situation now?

7

Avast continues to block to “ledahost.com” when income.

I think it’s not my pc.

8

When it happens?

9

Only it happens when I enter my website: ledahost.com

Out as an object: ledahost.com

10

Wait for someone to take a look at this.

11

I expect to hear from someone else?

12

Be patient.

13

If you think this detection is a F/P, report it to Avast lab through here: https://support.avast.com/

14

I have already sent, but no response.

15

http://urlquery.net/report.php?id=1433853897214
http://urlquery.net/report.php?id=1433853931034
https://sitecheck.sucuri.net/results/ledahost.com
http://aw-snap.info/file-viewer/?tgt=http%3A%2F%2Fledahost.com&ref_sel=Google&ua_sel=chr&fs=2

< h1> Moved Permanently< /h1> 10: < p> The document has moved < a href="http://www.ledahost.com/"> here< /a> .< /p>
http://app.webinspector.com/public/reports/35480619 http://multirbl.valli.org/lookup/104.24.116.13.html

When trying to visit the website:
Secure connection: fatal error (80) from server.

16

Avast support answered me and have already fixed the error.

Thank you very much to everyone who helped me, now he’s all right!

17

There were complaints for that IP: http://liveipmap.com/104.24.117.13
That is probably the reason for the blacklisting.
Anonymous proxy abuse at cloudflare, see passive DNS info: https://www.virustotal.com/en-gb/ip-address/104.24.117.13/information/

polonus

P.S. Sorry for the belated reaction, I was tracking in High Tatra :wink:

D