Page 1 of 2

What to do against Anti Virus ban?

PostPosted: Fri Dec 01, 2017 3:29 pm
by Knacki
I am really interested and do spread the word for verve, but as long those site is reported and blocked and verve is blocked by anti virus programs as well,it's tough.

It's abolutely understandable, that people don't trust this forum and verve as long this ban is existing.

I really do believe, that the site would have been much more frequented without a ban.
A big damage is already done and almost impossible to repair.
From my own behaviour I know, that a once reported site is deleted from my bookmarks. Just as simple as that.


As much it is quite nice to have a "privat" area, it is a desaster for any commercial plans for sure, or even for donations.

Is there anything else one can do beside those uneffeictve...what was it? False negative...positive? Reports?

Re: What to do against Anti Virus ban?

PostPosted: Fri Dec 01, 2017 4:50 pm
by Taron
I'm on pins and needles for more advice! :shrug:
It's just horrible, really. I mean, I literally cannot afford to buy any certificate or the likes, not knowing whether it would even change a thing. I've already managed to obtain the free https status, which also seems to make no difference.
I literally do not know exactly what to do. :PP

Re: What to do against Anti Virus ban?

PostPosted: Fri Dec 01, 2017 5:54 pm
by Taron
Can you check, if it's still under warning, Knacki?!
It must've been the 8th time that I went and reported that neither site nor software are malware, really making yet another plea. No idea if it worked at all or how long it will last, but when I went to the page again now it seemed to get through ok. :shrug:

...so exhausting.

Re: What to do against Anti Virus ban?

PostPosted: Fri Dec 01, 2017 6:41 pm
by Pilou
From the download page no problem for me ! 8-)
Maybe the first time! :)

I see on a French forum that a guy has its anti virus has blocked
with a very severe message! :shock:
Image

The same guy with another anti virus (Bitdender) on another computer works fine! 8-)

do you think some one just say I have disturb with this program, or it's the anti virus itself who controls the code ?

Re: What to do against Anti Virus ban?

PostPosted: Fri Dec 01, 2017 6:49 pm
by Taron
I can't tell, Pilou. Sometimes it does feel like sabotage, but that's what these times can feel like....don't they!? :shrug:
MAN, that is red. :shock:

Re: What to do against Anti Virus ban?

PostPosted: Sat Dec 02, 2017 1:07 am
by Pilou
For info! For the guy on a French forum...
It was Microsoft Defender given with Windows 10! :o

That is deseperate! :shrug:

Re: What to do against Anti Virus ban?

PostPosted: Sat Dec 02, 2017 11:56 am
by Knacki
My experience:
The site was only once blocked by my browser.
But Kaspersky is eating part of my verve versions history on my computer, time by time.
I‘ve on some of my computer Norton installed.
I can do a kind of analysis.
But when windows defender is in, as pilou says, maybe there is where to start.

Heck, I tried to find information about this in the net - that is kind of tough, specially when you have no idea what you are looking for.

A friend of mine has a small advertising agency doing web search optimisation.
I‘ll ask to get the contact to the freelancer doing this for him.
Maybe he has an idea?

Re: What to do against Anti Virus ban?

PostPosted: Sat Dec 02, 2017 12:31 pm
by Taron
Any help helps, Knacki, thank you very much!

Re: What to do against Anti Virus ban?

PostPosted: Sat Dec 02, 2017 12:53 pm
by Zeropainter
Maybe a parallel Linux/MacOS Version would be nice too - I hope also that in some years I din't need Windows anymore. :roll:

Re: What to do against Anti Virus ban?

PostPosted: Thu Dec 14, 2017 4:05 pm
by Knacki
Ok - the result from my phone call:


Being on the black list is terrible and very difficult getting removed. :(


Following steps are suggested:

1. Contact your provider and try to figure out with him what to do or maybe he got a suggestion.

2. Buy a SLL certificate which can solve everything, but is not granted to make things better and it is hard to get if you are really on a blacklist.

3. Try to figure out what the reason was to be on the blacklist.
This could be a newsletter sent in your domain's name - as even if you have your domain protected one can create an email address with your domains name.

Unfortunately that is it, I am sorry. :shrug:

Found this as a so told free sll certificate site???
https://letsencrypt.org/

I am sorry that I can't tell more, I almost know nothing about those things :(

EDIT:
Norton rates taron.de like this:
https://safeweb.norton.com/report/show?url=http%3A%2F%2Fwww.taron.de%2Fforum%2Fposting.php%3Fmode%3Dedit%26f%3D6%26p%3D19117

Virus total finds nothing
https://www.virustotal.com/en/url/a93c0cf08595fb19ebbfc4850fd0697104e3dcd62ebda6118cbeb170f65e1b40/analysis/1513294613/

Maybe some of these guys has put you on blacklist, just to get 25€ per month to remove you from blacklist?
https://sitecheck.sucuri.net/results/taron.de
Belarus - Minsk

This site says norton is the blacklist source:
https://www.siteguarding.com/

Kaspersky has no information - so it says it might be dangerous, better not go there??!!
https://virusdesk.kaspersky.de/#scanresults

Regarding this test, you are also on Malewarepatrol
https://www.virustotal.com/#/url/83b8e53c19caba26eeaa88ebb766be7874c5b7d2bfeba55edfbd0638100889a3/detection

Here are a bunch of more scanners:
https://websiteanalystsresource.wordpress.com/tag/avast-online-scan/
I just tried one more and this was fine:
http://app.webinspector.com/public/reports/77390540

Google is fine with taron.de as well
https://transparencyreport.google.com/safe-browsing/search?url=taron.de%2F
AVG as well
http://www.avgthreatlabs.com/de-de/website-safety-reports/domain/taron.de

So it seems that older versions of verve are blacklisted by kaspersky as well.
I copied my verve folder with endless old versions to another drive and an amount of versions were put into quarantine, but not all.
Those not disinfected are fine even in individual scan.
See report below.

As Kaspersky also deleted other versions before, I'll have to list manually:
deleted
0.99v10
0.99v14 (v11,12,13 are not on my HD)
0.99v15

also some very old versions:
0.99p
0.99u5
0.99u14
0.99u15
0.99v4
0.99v5

Report was:
UDS:DangerousObject.Multi.Generic

I also checked verve-painter.exe 0.99v30 with virustotal and all 67 tests including adaware, bitdefender, norton, etc etc are fine:
https://www.virustotal.com/en/file/669f44e658d604e45831166eea0bd306d8d9f67fc45be3e9146453725e21d10f/analysis/

From this analysis I would say, without knowing anything about this problematic, that the old verve painter versions listed above where infected or false reported as infected with the UDS:DangerousObject.Multi.Generic trojan.
False reports are not rare.
Probably since then, you are blacklisted.
What is interesting is, that since you are offering verve as zip files, they are scanned fine. I guess this was since 0.99.v16?


Wish you good luck!!