ESET Has Blocked My Site - What To Do?

[konukca 0]

hi,

our web site is blocked from eset.

how to remove in your listing

hxxp://grandmedyahotel.com/

[Marcos 4,839]

 

hi,

our web site is blocked from eset.

how to remove in your listing

hxxp://grandmedyahotel.com/

 

 

Malware has been removed and the website will be unblocked in the next update. Next time please follow these instructions to report a website block to ESET: hxxp://kb.eset.com/esetkb/index?page=content&id=SOLN141.

[Mr.Browser 0]

 

 

hi,

our web site is blocked from eset.

how to remove in your listing

hxxp://grandmedyahotel.com/

 

 

Malware has been removed and the website will be unblocked in the next update. Next time please follow these instructions to report a website block to ESET: hxxp://kb.eset.com/esetkb/index?page=content&id=SOLN141.

 

 Why I will not answer ?

Is there a difference between us? (me and konukca)

[Marcos 4,839]

Why I will not answer ?

Is there a difference between us? (me and konukca)

 

 

I've just briefly checked the website and the stuff due to which the website was blocked is still there. It's not that hard to find it and it was put there deliberately. That said, this is our last word on that subject. If you remove the problematic content, contact ESET Malware Research lab at samples[at]eset.com. We will not dispute blocking of any website here in this forum.

[rugk 397]

I already submitted this 2 weeks ago to samples @ eset.com.

I think it is a false-positive, but I'm not the website owner.

 

Website: hxxp://storage.workupload.com/
What I saw: It is blocked because malware would be on it.
Type: False-positive

 

Notes:
The page you blocked is a file-sharing page. I assume that someone uploads a malicious file and you blocked it because of this.
I highly recommend you to contact the site owner and ask him to remove the file.
Additionally I don't think that the complete domain "storage.workupload.com" is infected and spreads malware. If so you should change your blocking exactly to the malicious file instead of blocking the whole domain.

Edited October 17, 2014 by rugk

[rugk 397]

I already submitted this 2 weeks ago to samples @ eset.com.

I think it is a false-positive, but I'm not the website owner.

 

Website: hxxp://storage.workupload.com/

What I saw: It is blocked because malware would be on it.

Type: False-positive

 

Notes:

The page you blocked is a file-sharing page. I assume that someone uploads a malicious file and you blocked it because of this.

I highly recommend you to contact the site owner and ask him to remove the file.

Additionally I don't think that the complete domain "storage.workupload.com" is infected and spreads malware. If so you should change your blocking exactly to the malicious file instead of blocking the whole domain.

OK, the website was unblocked now. (with VSD 10585 or maybe even some VS earlier)

[zagor28 0]

I submitted this  to samples @ eset.com.

 

Website: www.kastamonukoykoop.com

Type: False-positive

I cleaned my all site from virus.I moved my site to a new hosting firm.

 

Mail day and time: 28 Now 2014 16:26

[cmuphyxa 0]

Hello, we  buying new domain utorrent.info for our old website utorrent.lv, but this new domain is blocked by your antivirus. Please see attachment where is proof for my ownership.
I have conversation now with Russian specialist from Moscow, but he long time dont answer me.

 

https://yadi.sk/i/ozWYPmVHd86e6

 

https://yadi.sk/i/DkmuXz-ud86fK

 

And I write emails to the sample@eset.com there also are silent

[Marcos 4,839]

Hello, we  buying new domain utorrent.info for our old website utorrent.lv, but this new domain is blocked by your antivirus. Please see attachment where is proof for my ownership.

I have conversation now with Russian specialist from Moscow, but he long time dont answer me.

 

PUA detections and blocks are not allowed to be disputed in this forum. If you are positive that all potentially unwanted content or applications have been removed, contact ESET Malware Research Lab.

[zagor28 0]

I submitted this  to samples @ eset.com.

 

Website: www.kastamonukoykoop.com

Type: False-positive

I cleaned my all site from virus.I moved my site to a new hosting firm.

 

Mail day and time: 28 Now 2014 16:26

[EmpireOption 0]

Dear moderators, 

 

I am trying this channel now, since I have already tried via phone and web, but without any success. 

 

Just a couple of weeks ago, our company’s website started to have an incompatibility with your suggested site list, causing that many of our clients have been blocked at the time they want to log on our site.

 

Our company, EmpireOption (www.empireoption.com), is a 100% regulated investment platform, with offices in 4 different countries, over 200 employees and more than 650.000 clients from all around the world. 

 

We haven’t changed a single thing in the programming of our site in the last weeks, nor received attacks, which is why it is very strange that our site is now being unrecommended by you.

 

Is it possible that someone on your side could help us with this situation? If we have to implement measures from our side, it would be of the utmost importance to take them immediately, so we can re-establish our normal functioning. 

 

Thanks in advance. 

 

EmpireOption IT Team

[SweX 871]

How do I submit a virus, website or potential false positive sample to the ESET lab?

 

hxxp://kb.eset.com/esetkb/index?page=content&id=SOLN141

[EmpireOption 0]

Hi Moderators.

 

We run a test in hxxp://sitecheck.sucuri.net/results/www.empireoption.com and we discover that the potential warning come from a Javascript that call a css function. 

We already delete it from all our pages, the site should be perfect now. 

We run reports in other websites as well and we didn't find anything else. 

Here is am example: https://app.webinspector.com/public/reports/28731772

 

Please let us know what else can we do to remove our site from blacklist from ESET. 

 

Thanks!

[Marcos 4,839]

Please let us know what else can we do to remove our site from blacklist from ESET. 

 

If you believe the website is blocked in error, please report it to ESET as per the instructions here.

[Mr.Browser 0]

Hello

 

i eend the email to: samples@eset.com.But emails sent is returned !!

My old host scans it was a malicious file But I've bought is new host and clean scan result But it seems to have been cache.... For each scan result shows!! Please check out my site without file is malicious or not.

And do not forget, go to link down page "Force a Re-scan to clear the cache" Results will vary

hxxp://sitecheck.sucuri.net/results/www.p30mororgar.ir

 

Show you to image:

hxxp://www.freeuploadsite.com/do.php?img=65605

 

These images not fake:

hxxp://www.freeuploadsite.com/do.php?img=65531

hxxp://www.freeuploadsite.com/do.php?img=65530

 

Please answer me

- Thanks you

Edited January 20, 2015 by Mr.Browser

[Mr.Browser 0]

Hellooo

 

Anybody here... Anybody here...

[ResolveThem 0]

My website is blocked by ESET

 

hxxps://resolvethem.com
 

I've tried many times with emails and submitting it to you guys but nothing has ever been done

I unlinked your web addy per forum rules.
 

[rugk 397]

It seems as resolvethem.com is now unblocked. I could access it without any blocking message from ESS.

 

VSD 11214

Edited February 22, 2015 by rugk

[konukca 0]

hi eset team,

 

our web site is blocked from eset.

how to remove in your listing.

 

hxxp://rosegardenistanbul.com

 

thank you for your help.

[stackz 102]

konukca,

Follow JavierSeguraNA's directions in the following post: https://forum.eset.com/topic/250-eset-has-blocked-my-site-what-to-do/#entry837

Edited February 26, 2015 by stackz

[cinohee2 0]

hxxp://hbeset.com/

Hello

Why eset closed my site?

There is not any potential malware or virus

This site never send any trail or fake username

Open this site please

Edited March 3, 2015 by JavierSeguraNA
unlinked the site.

[JavierSeguraNA 36]

To submit a suspicious file, website or possible false positive to ESET for analysis, follow the instructions for your issue using the link below:

hxxp://kb.eset.com/e...soln141&ref=esf

[Dosare Juridice 0]

Hi!

My name is Radu Marian and I am the owner of www.dosare-juridice.ro.
This is a presentation website of an application Dosare Juridice.

The application has a PC version coded in Java and an Android version.

There is no malware in my PC application version. The download link is this
hxxp://www.dosare-juridice.ro/downloads/Dosare%20Juridice.zip

 

The address of the block content is www.dosare-juridice.ro

 

Please help me with this problem.

 

Thank you.

[kral 0]

hi

 

Our website address is hxxp://www.aylahost.com and hxxp://www.aylasms.com mistakenly blocked by eset. Activities our website is completely legal issue that does not cause harm to eset. Whole check Web is about anything and any eset.

 

I have sent many emails to samples@eset.com and samples@eset.sk address but emails will not be received by you:

 

The address to which the message has not yet been delivered is:

 

  samples@eset.sk

    host b.mx.eset.com [91.228.167.41]

    Delay reason: SMTP error from remote mail server after RCPT TO:<samples@eset.sk>:

    450 4.7.1 Client host rejected: cannot find your reverse hostname, [151.80.***]

 

No action is required on your part. Delivery attempts will continue for

some time, and this warning may be repeated at intervals if the message

remains undelivered. Eventually the mail delivery software will give up,

and when that happens, the message will be returned to you.

 

 

Thanks

[Marcos 4,839]

Probably your zone file was compromised as we've detected malicious subdomains like vnqfk5ed3l13sha4maw1wxg.aylahost.com, x5lo51tnt9c1e05nfgetpmj.aylahost.com, ltlatk4vht8nk9dlih31wmi.aylahost.com, 

p3cjd19q3vv6ly9bju9wgri.aylasms.com, 90rctna9ilmoxetmsbpiu9j.aylasms.com, etc. 

 

The reason for undelivered emails is that your IP address doesn't have a DNS PTR record (you can check it here for instance: hxxp://mxtoolbox.com/ReverseLookup.aspx).