Norton warning about my site

  • Hi, I recently launched a site at https://www.hiddentreasures.org.uk for a UK charity, and some visitors with Norton Antivirus are getting the warning below. The site is using WordPress 3.5.1 and these plugins:
    Artiss Content Reveal
    FBF – Facebook Page Feed Widget

    Any suggestions what I need to change about the site so Norton doesn’t think there’s something malicious there? I’ve tried contacting Norton, they came back to me saying they were unable to reproduce the problem. (But a quick check on Norton Safe Web suggests they are still warning about it).

    Here’s the ‘threat’ report you get from Norton:

    Threat Report

    small-warning Drive-By Downloads Threats found: 1
    Here is a complete list: (for more information about a specific threat, click on the Threat Name below)

    Threat Name: HTTP Fake AV Redirect Request
    Location: https://www.hiddentreasures.org.uk/

Viewing 6 replies - 1 through 6 (of 6 total)
  • Moderator t-p

    (@t-p)

    have you tried:

    -deactivating ALL plugins temporarily to see if this resolves the problem. If this works, re-activate them individually (one-by-one) to find the problematic plugin(s). If you can’t get into your admin dashboard, try deactivating via FTP or SFTP or whatever file management application your host provides. If applicible, also remember to deactivate any plugins in the mu-plugins folder. The easiest way is to rename that folder to mu-plugins-old.
    – To rule out any theme-specific issue, try switching to the unedited default theme for a moment using the WP dashboard. If you don’t have access to your admin area, you can switch to the default theme by renaming your current theme’s folder in wp-content/themes and adding “-old” to the end of the folder name using via FTP or SFTP or whatever file management application your host provides.
    – resetting the plugins folder by FTP or PhpMyAdmin. Sometimes, an apparently inactive plugin can still cause problems (because the hooks remain unless plugins completely removed or some plugins stick around in cached files. So by renaming the folder, you break them and force them inactive).

    Thread Starter sisheff

    (@sisheff)

    Thanks Tara, I’ve currently got just the one plug-in running. I’m a little reluctant to deactivate that one as I’ve got most of the site’s content in it! But I guess I’ll have to figure out a way to re-configure it all, at least temporarily.

    Many thanks!

    Thread Starter sisheff

    (@sisheff)

    Hi Tara, I thought you might like to know that stripping back the plug-ins seems to have worked, with Norton no longer giving a warning when you try to access the site. So many thanks once again for your help.

    The site is still blacklisted by Norton:
    https://sitecheck.sucuri.net/results/www.hiddentreasures.org.uk

    Thread Starter sisheff

    (@sisheff)

    Thanks Krishna, I think I have to wait possibly a couple of weeks for Norton to review the site and remove their blacklisting — unless anyone knows of a way of speeding that up?

    You can find a red help image/link at the Norton site (follow the link I posted). Click on that and see if that can help you. Sorry, I have not used it – so I don’t know.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Norton warning about my site’ is closed to new replies.

Tags