URL:Mal Chrome, IE, Firefox

Kevinex · 2015-06-08T12:55:40.000Z

For several days I’m having problems with my site ledahost.com

Avast detects it as if I had some kind of virus blocking access to the site, have reviewed by the support but did not find any virus, I am reported to Avast false positive but got no answer.

Any help?

TwinHeadedEagle · 2015-06-08T12:56:11.000Z

Hello,

Please follow this topic and attach required reports

https://forum.avast.com/index.php?topic=53253.0

Kevinex · 2015-06-08T13:11:10.000Z

My apologies, I have attached the logs as requested in that post.

TwinHeadedEagle · 2015-06-08T13:23:06.000Z

https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:

createsrpoint;
chrdefaults;
bitsadmin /reset /allusers;b
C:\Users\Kevinex\AppData\Local\Google\Chrome\User Data\Default\Preferences;f
autoclean;
emptyalltemp;
ipconfig /flushdns;b

[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

Kevinex · 2015-06-08T14:09:34.000Z

This is the result, is attached.

TwinHeadedEagle · 2015-06-08T14:22:32.000Z

Good. How is the situation now?

Kevinex · 2015-06-08T14:47:28.000Z

Avast continues to block to “ledahost.com” when income.

I think it’s not my pc.

TwinHeadedEagle · 2015-06-08T15:28:04.000Z

When it happens?

Kevinex · 2015-06-08T15:48:15.000Z

TwinHeadedEagle post:8:

When it happens?

Only it happens when I enter my website: ledahost.com

Out as an object: ledahost.com

TwinHeadedEagle · 2015-06-08T16:32:43.000Z

Wait for someone to take a look at this.

Kevinex · 2015-06-08T17:45:56.000Z

TwinHeadedEagle post:10:

Wait for someone to take a look at this.

I expect to hear from someone else?

TwinHeadedEagle · 2015-06-08T17:46:59.000Z

Be patient.

system · 2015-06-09T01:01:47.000Z

If you think this detection is a F/P, report it to Avast lab through here: https://support.avast.com/

Kevinex · 2015-06-09T03:35:35.000Z

iroc9555 post:13:

If you think this detection is a F/P, report it to Avast lab through here: https://support.avast.com/

I have already sent, but no response.

Eddy · 2015-06-09T13:03:54.000Z

http://urlquery.net/report.php?id=1433853897214
http://urlquery.net/report.php?id=1433853931034
https://sitecheck.sucuri.net/results/ledahost.com
http://aw-snap.info/file-viewer/?tgt=http%3A%2F%2Fledahost.com&ref_sel=Google&ua_sel=chr&fs=2

< h1> Moved Permanently< /h1> 10: < p> The document has moved < a href="http://www.ledahost.com/"> here< /a> .< /p>

http://app.webinspector.com/public/reports/35480619 http://multirbl.valli.org/lookup/104.24.116.13.html

When trying to visit the website:
Secure connection: fatal error (80) from server.

Kevinex · 2015-06-09T15:44:52.000Z

Eddy post:15:

http://urlquery.net/report.php?id=1433853897214
http://urlquery.net/report.php?id=1433853931034
https://sitecheck.sucuri.net/results/ledahost.com
http://aw-snap.info/file-viewer/?tgt=http%3A%2F%2Fledahost.com&ref_sel=Google&ua_sel=chr&fs=2

< h1> Moved Permanently< /h1> 10: < p> The document has moved < a href="http://www.ledahost.com/"> here< /a> .< /p>
http://app.webinspector.com/public/reports/35480619 http://multirbl.valli.org/lookup/104.24.116.13.html
When trying to visit the website:
Secure connection: fatal error (80) from server.

Avast support answered me and have already fixed the error.

Thank you very much to everyone who helped me, now he’s all right!

polonus · 2015-06-12T06:28:51.000Z

There were complaints for that IP: http://liveipmap.com/104.24.117.13
That is probably the reason for the blacklisting.
Anonymous proxy abuse at cloudflare, see passive DNS info: https://www.virustotal.com/en-gb/ip-address/104.24.117.13/information/

polonus

P.S. Sorry for the belated reaction, I was tracking in High Tatra

D

Announcements