My site gets blocked by antivirus software

[lastgbfan]

A few of my friends have told me that they can't view my site because their anti-virus software says it's unsafe. I'm not aware of anything dangerous or malicious that I may have installed on my own site. I'm able to access my own site without difficulty, but then again I don't have any third-party antivirus software installed.

I have two Wordpresses on my site, one dedicated for my blog, and another for a portfolio. Both of them using some plugins like Lightboxing.

If this issue was already resolved, I hope someone can refer me to a link because I wasn't able to find one.

I'm on Cossacks server
http://ah.pcriot.com

I'm pretty much a newbie when it comes to these things, but any help would be much appreciated.

[EDIT] My friends can still see the site okay, it's just that they get prompted about it being unsafe. I just don't want to deter/scare any visitors from viewing my site.

 

[Smith6612]

My Anti-virus nor any security measures I have along the way are complaining about a thing here. Could you ask your friends what anti-virus programs they use?

 

[lastgbfan]

One instance came from a friend using Trend Micro. She had to add my site to a whitelist to disable any further warnings.

 

[loveispoison]

looks clear to me iswell my anti virus didnt show me any warnings

 

[adamparkzer]

That's interesting, your site seems fine to me. Are you sure it isn't your friend that's having the problems? I've heard of viruses that forward random pages to "Your Computer Is At Risk" pages so the infected user thinks they have to download some fake antivirus or something like that, which ends up costing money and making profit for the virus creator.

I dunno how good Trend Micro is, but those big company antiviruses tend to search for viruses that don't exist anymore and miss the huge new undiscovered virus sitting in your hard drive. Your friend might still have a relatively new virus, even if they have an antivirus software.

 

[lastgbfan]

The friend using Trend Micro is convinced that she doesn't have anything like what adamparkzer mentioned. Another friend a long while back also mentioned something about Internet Explorer once blocking it, but I've yet to ask him the specifics; like if he was using a built-in-browser plugin/addon scanner or something like that. If I don't get any more complaints about my site though, then I'll gladly accept this post to be closed.

 

[Smith6612]

Have them run MalwareBytes just to make sure there's nothing in their PC. You never know if Trend Micro missed something (and yes I've heard of them), but the last I checked they weren't the highest on the list in terms of detections.

 

[tittat]

Just checked your site and it loads fine with no any warnings.Am having AVG installed.

 

[zubair12]

I am using ESET NOD and everything is clear

 

[misson]

Since your friend was using TrendMicro, I tried TrendProtect and it indeed gave a warning. Googled "sitecriot.com" and it gave a warning for all pages on the pcriot.com domain. At some point, there was probably a subdomain of pcriot.com that was a malware or phishing site (though it could have been a false positive) and the whole domain was flagged.

The next step is for you to get your site unblocked or the admins to get the alert moved from pcriot.com to whichever subdomain was hosting the malware. Trend Micro has a form to get things started.

 

[zen-r]

Here is a list of some of the sites which members have posted recently in these forums, but I have been unable to view.

http://ah.pcriot.com (cossacks)

http://knowledgebase.x10hosting.com/ Edit : this one now does appear, but gives "Domain Available!!"

http://unset-this.co.cc/2009/06/using-gmail-instead-of-your-hosts-mail.html Edit : after many days, this one now does appear, but gives "www.unset-this.co.cc is available"

http://afroclocks.com

http://nowitnesses.pcriot.com

...and many more.

Other people could view these sites when I could not.

They do not flag as viruses or anything, I just get this message (even with my firewall switched off);

"Unable to connect
Firefox can't establish a connection to the server at ah.pcriot.com.
* The site could be temporarily unavailable or too busy. Try again in a few
moments.
* If you are unable to load any pages, check your computer's network
connection.
* If your computer or network is protected by a firewall or proxy, make sure
that Firefox is permitted to access the Web."

It also happens if I use Internet Explorer.

I have suspected for a while now that a large IP range is getting blocked by my ISP or elsewhere, for reasons unknown but probably as misson suggested. Note: most people able to view these sites are probably from the USA, whilst I am in the UK.

At some point I will have to investigate this further.

Anyone else with any suggestions as to the cause & solution?

 

[adamparkzer]

Knowledgebase and Unset-This are Garrett's website. I think Unset-This ended up becoming the new Knowledgebase, then the Knowledgebase magically disappeared and was replaced by a "Domain Available!" page. I told him about this earlier this morning but haven't gotten a response yet.

As for http://ah.pcriot.com, I'm able to view it fine.

 

[zen-r]

Yes, I knew whose sites these were.

I just made a note of them at the time because I couldn't view them, when other people could!

I still can't view the other sites in the list, or many others.

Please see my edit to my last post (made while you were adding your post!)

Anyone with any suggestions as to the cause & solution?

 

[zubair12]

Here is a list of some of the sites which members have posted recently in these forums, but I have been unable to view.

http://ah.pcriot.com (cossacks)

http://knowledgebase.x10hosting.com/ Edit : this one now does appear, but gives "Domain Available!!"

http://unset-this.co.cc/2009/06/using-gmail-instead-of-your-hosts-mail.html Edit : after many days, this one now does appear, but gives "www.unset-this.co.cc is available"

http://afroclocks.com

http://nowitnesses.pcriot.com

...and many more.

Other people could view these sites when I could not.

They do not flag as viruses or anything, I just get this message (even with my firewall switched off);

"Unable to connect
Firefox can't establish a connection to the server at ah.pcriot.com.
* The site could be temporarily unavailable or too busy. Try again in a few
moments.
* If you are unable to load any pages, check your computer's network
connection.
* If your computer or network is protected by a firewall or proxy, make sure
that Firefox is permitted to access the Web."

It also happens if I use Internet Explorer.

I have suspected for a while now that a large IP range is getting blocked by my ISP or elsewhere, for reasons unknown but probably as misson suggested. Note: most people able to view these sites are probably from the USA, whilst I am in the UK.

At some point I will have to investigate this further.

Anyone else with any suggestions as to the cause & solution?

I have also same problem with my domain.
It shows Domain is available page.
http://bosspc.co.cc

I contact co.cc and they send me this mail.....



[FONT=Geneva, Arial, Sans-serif]Dear Sir, or Madam,
[FONT=Geneva, Arial, Sans-serif]Thank you for contacting us and using our service.[/FONT]

[FONT=Geneva, Arial, Sans-serif]Upon investigation, I regret to tell this but we suspect that your site has [FONT=Geneva, Arial, Sans-serif]some inappropriate contents. [/FONT]
[FONT=Geneva, Arial, Sans-serif]For that reason, we have suspended your domain, you cannot use the domain. [/FONT][/FONT]
[FONT=Geneva, Arial, Sans-serif][FONT=Geneva, Arial, Sans-serif]On top of that, you cannot change any setting of the domain. [/FONT][FONT=Geneva, Arial, Sans-serif]Sorry for any inconvenience[/FONT][/FONT][FONT=Geneva, Arial, Sans-serif].
[/FONT][/FONT]


[FONT=Geneva, Arial, Sans-serif]



[/FONT]
[FONT=Geneva, Arial, Sans-serif]
[/FONT][FONT=Geneva, Arial, Sans-serif]Best Regards,
[/FONT][FONT=Geneva, Arial, Sans-serif]CO.CC Service[/FONT]

 

[galaxyAbstractor]

One instance came from a friend using Trend Micro. She had to add my site to a whitelist to disable any further warnings.

I had a support ticket about that once, a person using trend micro couldn't access no x10 sites. I took the time to download the trial of trend micro, but I had no problems whatsoever, even tho I sat all protection to paranoia mode (in other words, high protection). I still had no problems accessing any x10 site, so I don't know if it really is trend micro, maybe x10hosting has been added to the blocked sites by misstake?

 

[zen-r]

I have also same problem with my domain.
It shows Domain is available page.
http://bosspc.co.cc....

That's not the same problem as I described in my post.


By the way, if you remember, I did warn you by PM a few days ago that your site was showing the "Domain is available page". You just replied telling me that it was because your DNS was pointing to another host (which didn't seem to make much sense!)