Jump to content

ESET Has Blocked My Site - What To Do?


Guest hamid
Go to solution Solved by JavierSeguraNA,

Recommended Posts

  • Administrators

 

hi,
our web site is blocked from eset.
how to remove in your listing

 

 

Malware has been removed and the website will be unblocked in the next update. Next time please follow these instructions to report a website block to ESET: hxxp://kb.eset.com/esetkb/index?page=content&id=SOLN141.

Link to comment
Share on other sites

 

 

hi,
our web site is blocked from eset.
how to remove in your listing

 

 

Malware has been removed and the website will be unblocked in the next update. Next time please follow these instructions to report a website block to ESET: hxxp://kb.eset.com/esetkb/index?page=content&id=SOLN141.

 

 Why I will not answer ?

Is there a difference between us? (me and konukca)

Link to comment
Share on other sites

  • Administrators

Why I will not answer ?

Is there a difference between us? (me and konukca)

 

 

I've just briefly checked the website and the stuff due to which the website was blocked is still there. It's not that hard to find it and it was put there deliberately. That said, this is our last word on that subject. If you remove the problematic content, contact ESET Malware Research lab at samples[at]eset.com. We will not dispute blocking of any website here in this forum.

Link to comment
Share on other sites

  • 1 month later...

I already submitted this 2 weeks ago to samples @ eset.com.

I think it is a false-positive, but I'm not the website owner.

 

Website: hxxp://storage.workupload.com/
What I saw: It is blocked because malware would be on it.
Type: False-positive

 

Notes:
The page you blocked is a file-sharing page. I assume that someone uploads a malicious file and you blocked it because of this.
I highly recommend you to contact the site owner and ask him to remove the file.
Additionally I don't think that the complete domain "storage.workupload.com" is infected and spreads malware. If so you should change your blocking exactly to the malicious file instead of blocking the whole domain.

Edited by rugk
Link to comment
Share on other sites

I already submitted this 2 weeks ago to samples @ eset.com.

I think it is a false-positive, but I'm not the website owner.

 

Website: hxxp://storage.workupload.com/

What I saw: It is blocked because malware would be on it.

Type: False-positive

 

Notes:

The page you blocked is a file-sharing page. I assume that someone uploads a malicious file and you blocked it because of this.

I highly recommend you to contact the site owner and ask him to remove the file.

Additionally I don't think that the complete domain "storage.workupload.com" is infected and spreads malware. If so you should change your blocking exactly to the malicious file instead of blocking the whole domain.

OK, the website was unblocked now. (with VSD 10585 or maybe even some VS earlier)

Link to comment
Share on other sites

  • 1 month later...

I submitted this  to samples @ eset.com.

 

Website: www.kastamonukoykoop.com

Type: False-positive

I cleaned my all site from virus.I moved my site to a new hosting firm.

 

Mail day and time: 28 Now 2014 16:26

Link to comment
Share on other sites

Hello, we  buying new domain utorrent.info for our old website utorrent.lv, but this new domain is blocked by your antivirus. Please see attachment where is proof for my ownership.
I have conversation now with Russian specialist from Moscow, but he long time dont answer me.

 

https://yadi.sk/i/ozWYPmVHd86e6

 

https://yadi.sk/i/DkmuXz-ud86fK

 

And I write emails to the sample@eset.com there also are silent

Link to comment
Share on other sites

  • Administrators

Hello, we  buying new domain utorrent.info for our old website utorrent.lv, but this new domain is blocked by your antivirus. Please see attachment where is proof for my ownership.

I have conversation now with Russian specialist from Moscow, but he long time dont answer me.

 

PUA detections and blocks are not allowed to be disputed in this forum. If you are positive that all potentially unwanted content or applications have been removed, contact ESET Malware Research Lab.

Link to comment
Share on other sites

I submitted this  to samples @ eset.com.


 


Website: www.kastamonukoykoop.com


Type: False-positive


I cleaned my all site from virus.I moved my site to a new hosting firm.


 


Mail day and time: 28 Now 2014 16:26


Link to comment
Share on other sites

  • 1 month later...

Dear moderators, 

 
I am trying this channel now, since I have already tried via phone and web, but without any success. 
 
Just a couple of weeks ago, our company’s website started to have an incompatibility with your suggested site list, causing that many of our clients have been blocked at the time they want to log on our site.
 
Our company, EmpireOption (www.empireoption.com), is a 100% regulated investment platform, with offices in 4 different countries, over 200 employees and more than 650.000 clients from all around the world. 
 
We haven’t changed a single thing in the programming of our site in the last weeks, nor received attacks, which is why it is very strange that our site is now being unrecommended by you.
 
Is it possible that someone on your side could help us with this situation? If we have to implement measures from our side, it would be of the utmost importance to take them immediately, so we can re-establish our normal functioning. 
 
Thanks in advance. 
 
EmpireOption IT Team
Link to comment
Share on other sites

Hi Moderators.

 

We run a test in hxxp://sitecheck.sucuri.net/results/www.empireoption.com and we discover that the potential warning come from a Javascript that call a css function. 

We already delete it from all our pages, the site should be perfect now. 

We run reports in other websites as well and we didn't find anything else. 

Here is am example: https://app.webinspector.com/public/reports/28731772

 

Please let us know what else can we do to remove our site from blacklist from ESET. 

 

Thanks!

Link to comment
Share on other sites

  • Administrators
Please let us know what else can we do to remove our site from blacklist from ESET. 

 

If you believe the website is blocked in error, please report it to ESET as per the instructions here.

Link to comment
Share on other sites

Hello
 
i eend the email to: samples@eset.com.But emails sent is returned !!
My old host scans it was a malicious file But I've bought is new host and clean scan result But it seems to have been cache.... For each scan result shows!! Please check out my site without file is malicious or not.
And do not forget, go to link down page "Force a Re-scan to clear the cache" Results will vary
 
Show you to image:
 
Edited by Mr.Browser
Link to comment
Share on other sites

  • 3 weeks later...

My website is blocked by ESET

 

hxxps://resolvethem.com
 

I've tried many times with emails and submitting it to you guys but nothing has ever been done

I unlinked your web addy per forum rules.
 

Link to comment
Share on other sites

  • 2 weeks later...

It seems as resolvethem.com is now unblocked. I could access it without any blocking message from ESS.

 

VSD 11214

Edited by rugk
Link to comment
Share on other sites

hxxp://hbeset.com/

Hello

Why eset closed my site?

There is not any potential malware or virus

This site never send any trail or fake username

Open this site please

Edited by JavierSeguraNA
unlinked the site.
Link to comment
Share on other sites

Hi!
My name is Radu Marian and I am the owner of www.dosare-juridice.ro.
This is a presentation website of an application Dosare Juridice.
The application has a PC version coded in Java and an Android version.

There is no malware in my PC application version. The download link is this
hxxp://www.dosare-juridice.ro/downloads/Dosare%20Juridice.zip

 
The address of the block content is www.dosare-juridice.ro
 
Please help me with this problem.

 

Thank you.

Link to comment
Share on other sites

  • 5 weeks later...
hi

 

Our website address is hxxp://www.aylahost.com and hxxp://www.aylasms.com mistakenly blocked by eset. Activities our website is completely legal issue that does not cause harm to eset. Whole check Web is about anything and any eset.

 

I have sent many emails to samples@eset.com and samples@eset.sk address but emails will not be received by you:

 

The address to which the message has not yet been delivered is:

 

  samples@eset.sk

    host b.mx.eset.com [91.228.167.41]

    Delay reason: SMTP error from remote mail server after RCPT TO:<samples@eset.sk>:

    450 4.7.1 Client host rejected: cannot find your reverse hostname, [151.80.***]

 

No action is required on your part. Delivery attempts will continue for

some time, and this warning may be repeated at intervals if the message

remains undelivered. Eventually the mail delivery software will give up,

and when that happens, the message will be returned to you.

 

 

Thanks

Link to comment
Share on other sites

  • Administrators

Probably your zone file was compromised as we've detected malicious subdomains like vnqfk5ed3l13sha4maw1wxg.aylahost.com, x5lo51tnt9c1e05nfgetpmj.aylahost.com, ltlatk4vht8nk9dlih31wmi.aylahost.com, 

p3cjd19q3vv6ly9bju9wgri.aylasms.com, 90rctna9ilmoxetmsbpiu9j.aylasms.com, etc. 

 

The reason for undelivered emails is that your IP address doesn't have a DNS PTR record (you can check it here for instance: hxxp://mxtoolbox.com/ReverseLookup.aspx).

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...