hpHosts Malware in palazzo-mannheim.de

[Luherer]

Hello,
the site is still listed in hpHosts on virustotal. Can you explain, how the results from virustotal are generaded?

Your site  reports, the site is clean.:

https://hosts-file.net/default.asp?s=http%3A%2F%2Fpalazzo-mannheim.de

 

 

Posted Thursday at 08:21 PM

Hello Support,

virustotal reports Malwarebytes hpHosts Malware

palazzo-mannheim.de
www.palazzo-mannheim.de

The website has been cleaned up after security issues. Please reanalyze and unblock. It would be kind to delete this thread afterwards, Thank you!

Thank you!

 

•  

Zynthesist

• Malware Intelligence Analyst
•  
• 
• Staff
•  
• 2,414 posts

• Report post
•  
•  #2

Posted Thursday at 09:20 PM

Hello,

Block is being removed.

Edited June 25, 2018 by Luherer

[Dashke]

Unfortunately sometimes it takes a bit of time for Virustotal to sync.

[Luherer]

Thanks!

In the meantime I activated VT. Their answer was:

1.         If the false positive is for a File, try re-scanning first. Domain reports by definition don’t produce verdicts, just show relationships and no historic data from there will be removed.
2.         If the false positive persists please reach out to the vendor that is producing it providing a link to the Virustotal report. List of vendor contacts can be found at the table below.
3.         If you do reach out to us, we will tell you to reach out to the vendors, as we will not be able to modify any results of scans. Ever. So don’t ask us to do it.
4.         We cache some URL results. If vendors have confirmed removal but a URL is still detecting, please reach out to us along with evidence that the vendor has removed your URL from the blacklist, as we may be able to speed up propagation.

 

So I asked for step 4. and provided "evidence" to the google police.