Verified URL -> False Positive -> Reported -> Still blocking site!

Avast Free Antivirus / Premium Security
1

Guys,

I have read the forum for almost every way of detecting if my Wprdpress site has threats:
https://www.virustotal.com/en/url/1ce69db5bba920b142e0738cfe0a0de17802218b1b1ae3224d3fa0947487352c/analysis/
https://sitecheck.sucuri.net/results/languagemagazine.com

I have also check if there is any domain blacklisted at my hosting IP:
http://www.urlvoid.com/ip/205.186.175.97/

Only site that detects something is Qutterra and is related to Visual Composer addon:
Too low entropy detected in string [[’ td-md-is-android td-md-is-os-x td-md-is-chrome td-md-is-firefox td-md-is-android td-md-is-os-x td-m’]]

Then I started reporting on Wed Feb 1st, 2017, url as false positive to Avast. Best reply I had is they are escalating to lab. However, this is taking a lot of time and my site’s reputation among people using avast is trashed.

I will appreciate your suggestions to fix this ASAP. BTW disabling Visual Composer is not an option.

2

→ http://zulu.zscaler.com/submission/show/9a4c44eb565fd3c39ab607761cb333c7-1486225085

You can report a URL here: https://www.avast.com/report-a-url.php

3

Blacklistings on that AS :
http://urlquery.net/report.php?id=1486225375544

66 Potentially Suspicious files :
https://quttera.com/detailed_report/languagemagazine.com

Vulnerable library used :
http://retire.insecurity.today/#!/scan/98ca01e1c665b233a47b5b640d91245b8e0311f0bb5218b42cade9b07d0fe8d3

4

Eddy I appreciate your assistance since it pointed me to updating jquery based on insecurity.today check.

However, that’s it.

Asyn check using zscaler.com says my site is ok. I’ve already reported the false positive url many times during last 4 days.
Quttera 66 issues are all the same: false positive. I mentioned that in the first post.

Avast still finds false positive threats at the site and does not allow visiting it!

5

Did you report it via the link in Reply #1…?

6

Yes Asyn. I did report it using the url you mentioned, several times…

7

OK, Pondus reported it for you.

8

Hi, I just checked, the site has been unblocked.

9

Still blocked for me using avast beta 2285 with definitions 170205-0.

10

Snap, still blocked.

I have the current VPS and streaming updates appear to be fine also (last stream about 15 minutes ago).

11

Hi guys, yes, it’s blocked again.

12

What can I do then?
You are right, it is unblocked for a few minutes then is blocked again!

I have 10 tickets and all of them have been escalated and there are no more news.

13

You should get a reply from vlab here on monday.

14

I have added languagemagazine[.]com to our cleanset; it will not be blocked again :wink:

15

Thanks HonzaZ, is working this time.