After auto update last night I now get a url/mal block on a site I have been to many times before. Startup boot scan and full scan show no problems with both Avast and Macafee.
the blocked site is hxtp://mp3.li
I have checked with Wepawet, AVG Online, Virustotal and Sucuri sites and they report it’s clean if I understand thier info correctly.
Is Avast reporting a FP and if so how can I get it to allow the site?
Site seems to be on an Internet blacklist of sites that US Internet providers would be required to block.
Additionally avast found flavicon.ico malware on that site in /themes/default/images/logo/png (on line 20)
Also Content after the < /html> tag should be considered suspicious.
235: < !-- from cache →
Here nothing found: http://sitecheck.sucuri.net/results/mp3.li
and here nothing: http://quttera.com/detailed_report/mp3.li (clean)
not here: http://urlquery.net/report.php?id=862401
and here: https://www.virustotal.com/url/a28942348125aa8a6ebfb47718e27cfcf5c4f09fdaa7fd518344ece0f472b62b/analysis/
Only code hick-ups found: info: [decodingLevel=0] found JavaScript
error: undefined variable a.style
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var a.style = 1;
error: line:1: …^
and
info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
info: [decodingLevel=0] found JavaScript
error: undefined variable d.isIE
error: line:1: SyntaxError: missing ; before statement:
error: line:1: var d.isIE = 1;
error: line:1: …^
and
info: [decodingLevel=0] found JavaScript
error: undefined variable apiInit
error: undefined function apiInit
info: [var url] URL=mp3 dot li
info: [var newurl] URL=mp dot li