Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am running Amazon linux Micro instance.I have configured php,apache and phantomjs in the instance.

When i first accessed the server from a browser 'Avast' antivirus threw me a popup that this site has trojan.

Please help me out.

share|improve this question
Check your html for "<script>" tags that shouldn't be there. – tftd Sep 25 '12 at 18:53
there were no <script> tags in the index.html or any other html pages in the server – jeyaganesh Sep 25 '12 at 18:54
Are you using addons in your browser? – tftd Sep 25 '12 at 19:06
No.I tried in systems. Mcafee also detects the same. "" trojan etc. – jeyaganesh Sep 25 '12 at 19:09
up vote 1 down vote accepted

Easy fix. Don't host trojans from an Amazon EC2 instance; RBN is much better for that sort of thing anyway.

Assuming you aren't actually serving up malware from your site, this can be caused by the use of a database of bad IPs Avast is using that's just not up to date - the last guy at the IP you were assigned may have been serving up malware.

Check your site with other AV vendors, and if it's actually clean, wait and/or contact Avast to get your IP off their bad IP list.

share|improve this answer
It makes sense.I associated a new ipaddress for my instance and now the antiviruses were not blocking it. Thanks. – jeyaganesh Sep 25 '12 at 19:46
Thought i am not actually hosting malware :-) – jeyaganesh Sep 25 '12 at 19:46

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.