Website being flagged for malware

Viruses and worms
1

I am an administrator for a site called http://www.bizjournals.com. Avast is currently flagging this site as hosting malware. Though the recommended virus scan sites I’ve found in this forum show it as clean:

http://www.urlvoid.com/scan/bizjournals.com/
http://urlquery.net/report.php?id=104894

In our testing, it seems that any reference to http://assets.bizjournals.com is getting flagged as malware, both by the web shield as well as by a local file scan. This URL is our CDN (Content Distribution Network), and is hosted by Akamai. Avast is flagging CSS files and favicons as malware, though to my knowledge they are not executable files.

Can someone here help determine what is happening? Thanks

2

can you attach a screenshot of the avast warning?

unmask parasites say supicious. 9 hidden external links found.

http://www.unmaskparasites.com/
not able to copy the scan link on ipad so you have to scan and see

3

Hi jcurtis,

Site is listed as a PHISH from 2012-05-25 00:58:47, the closing of which has status OVERDUE!
The phisihing url mentioned is this: htxp://www.bizjournals.com/buffalo/news/2012/05/24/hsbc-to-cut-money-laundering-unit-in.html
See: http://zulu.zscaler.com/submission/show/1147263d0551b5c3504b62a1d9c2cac2-1343332248
I also wonder why you weren’t alerted to this issue before as your site is Norton Secured, but they have let this issue slip through.
Be glad there is avast and the avast support forum to keep you informed of such issues,

polonus

4

So how do we get this PHISH designation removed? This page is an article about HSBC, there is no request for information or even a submission form on the page, other than the login fields. Is mentioning a bank enough to get labelled as a phishing page?

5

Hi jcurtis,

Just filled you in with the details via PM.

polonus

6

Thank you polonus, we will follow up on this lead.