Jump to content

Archived

This topic is now archived and is closed to further replies.

Guest hamid

ESET Has Blocked My Site - What To Do?

Recommended Posts

 

hi,
our web site is blocked from eset.
how to remove in your listing

 

 

Malware has been removed and the website will be unblocked in the next update. Next time please follow these instructions to report a website block to ESET: hxxp://kb.eset.com/esetkb/index?page=content&id=SOLN141.

Share this post


Link to post
Share on other sites

 

 

hi,
our web site is blocked from eset.
how to remove in your listing

 

 

Malware has been removed and the website will be unblocked in the next update. Next time please follow these instructions to report a website block to ESET: hxxp://kb.eset.com/esetkb/index?page=content&id=SOLN141.

 

 Why I will not answer ?

Is there a difference between us? (me and konukca)

Share this post


Link to post
Share on other sites

Why I will not answer ?

Is there a difference between us? (me and konukca)

 

 

I've just briefly checked the website and the stuff due to which the website was blocked is still there. It's not that hard to find it and it was put there deliberately. That said, this is our last word on that subject. If you remove the problematic content, contact ESET Malware Research lab at samples[at]eset.com. We will not dispute blocking of any website here in this forum.

Share this post


Link to post
Share on other sites

I already submitted this 2 weeks ago to samples @ eset.com.

I think it is a false-positive, but I'm not the website owner.

 

Website: hxxp://storage.workupload.com/
What I saw: It is blocked because malware would be on it.
Type: False-positive

 

Notes:
The page you blocked is a file-sharing page. I assume that someone uploads a malicious file and you blocked it because of this.
I highly recommend you to contact the site owner and ask him to remove the file.
Additionally I don't think that the complete domain "storage.workupload.com" is infected and spreads malware. If so you should change your blocking exactly to the malicious file instead of blocking the whole domain.

Share this post


Link to post
Share on other sites

I already submitted this 2 weeks ago to samples @ eset.com.

I think it is a false-positive, but I'm not the website owner.

 

Website: hxxp://storage.workupload.com/

What I saw: It is blocked because malware would be on it.

Type: False-positive

 

Notes:

The page you blocked is a file-sharing page. I assume that someone uploads a malicious file and you blocked it because of this.

I highly recommend you to contact the site owner and ask him to remove the file.

Additionally I don't think that the complete domain "storage.workupload.com" is infected and spreads malware. If so you should change your blocking exactly to the malicious file instead of blocking the whole domain.

OK, the website was unblocked now. (with VSD 10585 or maybe even some VS earlier)

Share this post


Link to post
Share on other sites

I submitted this  to samples @ eset.com.

 

Website: www.kastamonukoykoop.com

Type: False-positive

I cleaned my all site from virus.I moved my site to a new hosting firm.

 

Mail day and time: 28 Now 2014 16:26

Share this post


Link to post
Share on other sites

Hello, we  buying new domain utorrent.info for our old website utorrent.lv, but this new domain is blocked by your antivirus. Please see attachment where is proof for my ownership.
I have conversation now with Russian specialist from Moscow, but he long time dont answer me.

 

https://yadi.sk/i/ozWYPmVHd86e6

 

https://yadi.sk/i/DkmuXz-ud86fK

 

And I write emails to the sample@eset.com there also are silent

Share this post


Link to post
Share on other sites

Hello, we  buying new domain utorrent.info for our old website utorrent.lv, but this new domain is blocked by your antivirus. Please see attachment where is proof for my ownership.

I have conversation now with Russian specialist from Moscow, but he long time dont answer me.

 

PUA detections and blocks are not allowed to be disputed in this forum. If you are positive that all potentially unwanted content or applications have been removed, contact ESET Malware Research Lab.

Share this post


Link to post
Share on other sites

I submitted this  to samples @ eset.com.


 


Website: www.kastamonukoykoop.com


Type: False-positive


I cleaned my all site from virus.I moved my site to a new hosting firm.


 


Mail day and time: 28 Now 2014 16:26


Share this post


Link to post
Share on other sites

Dear moderators, 

 
I am trying this channel now, since I have already tried via phone and web, but without any success. 
 
Just a couple of weeks ago, our company’s website started to have an incompatibility with your suggested site list, causing that many of our clients have been blocked at the time they want to log on our site.
 
Our company, EmpireOption (www.empireoption.com), is a 100% regulated investment platform, with offices in 4 different countries, over 200 employees and more than 650.000 clients from all around the world. 
 
We haven’t changed a single thing in the programming of our site in the last weeks, nor received attacks, which is why it is very strange that our site is now being unrecommended by you.
 
Is it possible that someone on your side could help us with this situation? If we have to implement measures from our side, it would be of the utmost importance to take them immediately, so we can re-establish our normal functioning. 
 
Thanks in advance. 
 
EmpireOption IT Team

Share this post


Link to post
Share on other sites

Hi Moderators.

 

We run a test in hxxp://sitecheck.sucuri.net/results/www.empireoption.com and we discover that the potential warning come from a Javascript that call a css function. 

We already delete it from all our pages, the site should be perfect now. 

We run reports in other websites as well and we didn't find anything else. 

Here is am example: https://app.webinspector.com/public/reports/28731772

 

Please let us know what else can we do to remove our site from blacklist from ESET. 

 

Thanks!

Share this post


Link to post
Share on other sites
Please let us know what else can we do to remove our site from blacklist from ESET. 

 

If you believe the website is blocked in error, please report it to ESET as per the instructions here.

Share this post


Link to post
Share on other sites
Hello
 
i eend the email to: samples@eset.com.But emails sent is returned !!
My old host scans it was a malicious file But I've bought is new host and clean scan result But it seems to have been cache.... For each scan result shows!! Please check out my site without file is malicious or not.
And do not forget, go to link down page "Force a Re-scan to clear the cache" Results will vary
 
Show you to image:
 

Share this post


Link to post
Share on other sites

My website is blocked by ESET

 

hxxps://resolvethem.com
 

I've tried many times with emails and submitting it to you guys but nothing has ever been done

I unlinked your web addy per forum rules.
 

Share this post


Link to post
Share on other sites

It seems as resolvethem.com is now unblocked. I could access it without any blocking message from ESS.

 

VSD 11214

Share this post


Link to post
Share on other sites

hxxp://hbeset.com/

Hello

Why eset closed my site?

There is not any potential malware or virus

This site never send any trail or fake username

Open this site please

Share this post


Link to post
Share on other sites
Hi!
My name is Radu Marian and I am the owner of www.dosare-juridice.ro.
This is a presentation website of an application Dosare Juridice.
The application has a PC version coded in Java and an Android version.

There is no malware in my PC application version. The download link is this
hxxp://www.dosare-juridice.ro/downloads/Dosare%20Juridice.zip

 
The address of the block content is www.dosare-juridice.ro
 
Please help me with this problem.

 

Thank you.

Share this post


Link to post
Share on other sites
hi

 

Our website address is hxxp://www.aylahost.com and hxxp://www.aylasms.com mistakenly blocked by eset. Activities our website is completely legal issue that does not cause harm to eset. Whole check Web is about anything and any eset.

 

I have sent many emails to samples@eset.com and samples@eset.sk address but emails will not be received by you:

 

The address to which the message has not yet been delivered is:

 

  samples@eset.sk

    host b.mx.eset.com [91.228.167.41]

    Delay reason: SMTP error from remote mail server after RCPT TO:<samples@eset.sk>:

    450 4.7.1 Client host rejected: cannot find your reverse hostname, [151.80.***]

 

No action is required on your part. Delivery attempts will continue for

some time, and this warning may be repeated at intervals if the message

remains undelivered. Eventually the mail delivery software will give up,

and when that happens, the message will be returned to you.

 

 

Thanks

Share this post


Link to post
Share on other sites

Probably your zone file was compromised as we've detected malicious subdomains like vnqfk5ed3l13sha4maw1wxg.aylahost.com, x5lo51tnt9c1e05nfgetpmj.aylahost.com, ltlatk4vht8nk9dlih31wmi.aylahost.com, 

p3cjd19q3vv6ly9bju9wgri.aylasms.com, 90rctna9ilmoxetmsbpiu9j.aylasms.com, etc. 

 

The reason for undelivered emails is that your IP address doesn't have a DNS PTR record (you can check it here for instance: hxxp://mxtoolbox.com/ReverseLookup.aspx).

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...