Author Topic: False positive  (Read 2188 times)

0 Members and 1 Guest are viewing this topic.

adrian1111

  • Guest
False positive
« on: January 11, 2013, 02:01:41 PM »
Hi,

When I go to this site: http://www.yloader.com I get a message that the twitter button link contains a virus:

Infection Details
URL:   http://www.twitterbuttons.com/upload/bad...
Process:   C:\Users\adrian\AppData\Local\Google\Chr...
Infection:   URL:Mal

That link is actually to an image, but since the page detailing the infection doesn't show the complete url, I can't post it here.

This appears to be a false positive, can you please check by going to that site?

Thanks,

adrian1111

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37533
  • Not a avast user
Re: False positive
« Reply #1 on: January 11, 2013, 02:26:26 PM »
Quote
I get a message that the twitter button link contains a virus:
no it does not.....URL:mal means the url is on a block list.....for whatever reason

scroll down to bottom here and see all blocked domains on same IP.....guess that is the reason

http://www.urlvoid.com/scan/twitterbuttons.com/

« Last Edit: January 11, 2013, 02:29:18 PM by Pondus »

adrian1111

  • Guest
Re: False positive
« Reply #2 on: January 11, 2013, 05:04:11 PM »
The report from the link you posted says:

Report:   Rescan  |  28-12-2012, 07:05:42 GMT (2 weeks ago)
Domain:   twitterbuttons.com (Virus Scanner) (Network Tools) (Website Availability)
IP Address:   64.74.223.41 (Scan with IPVoid)
Detections   0/30 (0.00%)
Status    CLEAN

I believe that Avast should correct this kind of mistake promptly, otherwise their misleading information can drive users and customers away from legitimate sites that are showing this or other similar links.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37533
  • Not a avast user
Re: False positive
« Reply #3 on: January 11, 2013, 05:59:33 PM »
Hosted on same IP   http://www.urlvoid.com/ip/64.74.223.41


if you want to report as FP you can do it here   http://www.avast.com/contact-form.php
you may add a link to this topic in case they reply
« Last Edit: January 11, 2013, 07:37:58 PM by Pondus »