Author Topic: Positives from http://m.addthisedge.com today  (Read 7268 times)

0 Members and 1 Guest are viewing this topic.

Gagir

  • Guest
Positives from http://m.addthisedge.com today
« on: November 02, 2012, 02:43:01 PM »
From this, I gather that some thing it is a false positive: http://support.addthis.com/customer/portal/articles/search?q=avast

So, is it a false?

It seems that quite a few sites are using this, quite annoying!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37545
  • Not a avast user

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89115
  • No support PMs thanks
Re: Positives from http://m.addthisedge.com today
« Reply #2 on: November 02, 2012, 03:36:31 PM »
Getting a 404 error on that URL, so no alert for me.

If you could attach a screenshot of the avast alert.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Gagir

  • Guest
Re: Positives from http://m.addthisedge.com today
« Reply #3 on: November 03, 2012, 02:13:12 PM »
I was getting this from any site using their banner service.
This is their forum: http://support.addthis.com/customer/portal/questions/606668-urgent-avast-false-positive

This site is quite serious and was giving the alert: http://www.invitrogen.com/site/us/en/home.html

Unless a new def file was released by Avast yesterday noon eastern time, the banner site corrected the problem.
Or even better, site webmasters stopped using this service. ;D ;D

I can't find data or a log from the network agent that I could share.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89115
  • No support PMs thanks
Re: Positives from http://m.addthisedge.com today
« Reply #4 on: November 03, 2012, 04:31:25 PM »
I'm not getting an alert on the invitrogen.com/site/us/en/home.html link you posted. For the future when posting suspect URLs change the http to hXXp to break links and avoid accidental exposure to a suspect site.

You can check the C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\log\nshield.log file (XP location) or C:\ProgramData\AVAST Software\Avast\log\nshield.log (Vista, win7), as that should contain the network shield alerts.

Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89115
  • No support PMs thanks
Re: Positives from http://m.addthisedge.com today
« Reply #6 on: November 03, 2012, 05:29:34 PM »
For me a 1x1 image doesn't necessarily mean it is a web beacon. I used to use them as spacers a clear image may be 1X1, but you can assign a larger area for the 1 pixel image.

I actually had a browser crash whilst checking this out as it tried to get the shared-static elements.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security