“ilive.ro” is a webhosting site.
Anyone can make a site “name.ilive.ro”.
But these sites are not directly linked with each other.
So if a few of them were found infected I don’t see the reason to mark all of them infected.
I hope you’ll modify your program to make this distinction.
Yes, I know about “Norton”.
But if you scan the site at urlvoid.com you’ll notice that from 23 only 2 are reporting “suspicious” not “infected”. One is Norton SafeWeb and the other is MyWot who is not an online scanner. Some time ago there were more but they corrected their results. From the people who make Norton SafeWeb I didn’t get a reply (positive or negative). But I know that is very hard to make them correct their mistakes (personal experience).
I think I can guess what happened here (because it happened with other sites too): a few antiviruses showed some false positives, users are panicking and start reporting the site(s) as infected (for example at MyWot you can vote a site, users can vote sites/files at Norton).
So a few other programs are starting blocking it/them.
The power of “gossip”… 88)
PS: Oh, and BTW those links showed by the Norton SafeWeb at the bottom of the page are not directly linked with other *.ilive.ro sites. This is exactly what I was talking about in my first post.
So indeed IT IS a false positive…