« previous next »
Pages: [1]   Go Down

Author Topic: a false positive?  (Read 2633 times)

0 Members and 1 Guest are viewing this topic.

abombo

  • Guest
a false positive?
« on: August 10, 2010, 03:34:41 PM »
Hello,

Is this a false positive or does that website have some hacked content?

Thanks
Logged

Offline jsejtko

  • Avast team
  • Full Member
  • *
  • Posts: 171
    • ALWIL Software
Re: a false positive?
« Reply #1 on: August 10, 2010, 04:40:24 PM »
Hello,

This is false positive which is already fixed internally. The fix will be released in next 2 hours.

Regards
Logged

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89293
  • No support PMs thanks
Re: a false positive?
« Reply #2 on: August 10, 2010, 05:05:18 PM »
Well it is strange as that page only has content to redirect it to hXXp://portal.uned.es (link 1 below), but that URL triggers the Network Shield and if bypassed, it triggers another web shield alert (link 2 below), which is a packed javascript file.

First avast web shield alert, http://www.virustotal.com/file-scan/report.html?id=0607321cefb3576d946e5508be4046e350593bdf8f62af4328d337f2c672840b-1281452040.

Second avast web shield alert, http://www.virustotal.com/file-scan/report.html?id=bef9d3e7b3aa57f435869262cc6523c2c445900d0d38bc1d697f5e0b6647912d-1281452276.

In both cases only avast and GData (which uses avast as one of its two scanners) detect this, so it could be an FP.

Edit: Missed jsejtko's post whilst investigating this, which confirms the FP.


« Last Edit: August 10, 2010, 05:07:01 PM by DavidR »
Logged
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

abombo

  • Guest
Re: a false positive?
« Reply #3 on: August 11, 2010, 12:16:22 AM »

I've seen that the false positive is already fixed.
Now it's ok.

Thank you jsejtko and DavidR  :) for your help.

Hugs,

Logged

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89293
  • No support PMs thanks
Re: a false positive?
« Reply #4 on: August 11, 2010, 12:21:57 AM »
No problem, glad I could help.

Welcome to the forums.
Logged
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security
Pages: [1]   Go Up
« previous next »