Author Topic: groupworld.net false positive  (Read 1878 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
groupworld.net false positive
« on: June 19, 2014, 09:02:33 PM »
For the last few months avast has been blocking groupworld.net as url:mal. Seems to be a false positive due to us using a plugin. Reporting as a false positive, and also contacting avast (through both website contact form and twitter) doesn't seem to help.

I think the issue is in our plugin (which is classed as 'very poor rating' in the 'browser cleanup'). There doesn't seem to be any way for users to rate add-ons, so I assume avast itself has automatically given us the 1-star rating. My guess is that it's because the plugin is for web conferencing, and we have a 'remote control' option in the desktop sharing which listens to the keyboard. I assume that this means that avast automatically classes us as potential spyware.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34062
  • malware fighter
Re: groupworld.net false positive
« Reply #1 on: June 19, 2014, 09:47:12 PM »
Could also be IP related, see:  http://sameid.net/ip/72.55.164.167/
Also consider: http://dnscheck.pingdom.com/?domain=groupworld.net&timestamp=1403206427&view=1
And this spam blocking for the nameserver it is on: http://knujon.com/nameservers/NS09.DOMAINCONTROL.COM.html

Report a possible FP or ask for an exclusion here: www.avast.com/contact-form.php

polonus
« Last Edit: June 19, 2014, 10:21:03 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

REDACTED

  • Guest
Re: groupworld.net false positive
« Reply #2 on: June 20, 2014, 02:16:05 AM »
It's not ip related, as we manage all those sites and they are not compromised (and avast doesn't block them).

It's not DNS related as we just use godaddy for DNS, and none of the other sites are blocked by avast.

As I said I've already reported it through that contact form (twice in fact), the last time on 21 April.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34062
  • malware fighter
Re: groupworld.net false positive
« Reply #3 on: June 20, 2014, 10:19:37 AM »
Hi groupboard,

I have no influence on that, you just have to wait for an avast team member to react.
I am just a volunteer with some experience in website security analysis and doing this for the good of my soul and pro deo for the community as a whole  :)
Hope your issue soon will be sorted out.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: groupworld.net false positive
« Reply #4 on: June 20, 2014, 02:02:17 PM »
Hi,
I removed groupworld.net from blacklist ;-)!
Honza