Author Topic: Help with addressing some false positives  (Read 1586 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Help with addressing some false positives
« on: April 17, 2015, 06:49:19 AM »
Hello,

I'm sorry to ask here - but I've tried to email in the past, and I suspect Avast systems may not be receiving my mails.  Feel free to mail me directly, and remove my post.

I'm the operator of a dns hosting service, and I'm trying to interpret a dataset for flagging possible misuse attempts.

Within this dataset includes data from Avast - but unfortunately for the moment, a pattern has emerged where Avast seems to hit overwhelmingly most commonly for sites without any viruses at all, hostnames which (to my knowledge, anyway) have never contained viruses, resulting in a large set of false positives.

Here's a few samples of what I am seeing over and over - (but there's quite a number more then just this in the dataset):

http://www.virustotal.com/latest-report.html?resource=00b51d625b24844f6d635aa0159276cc
http://www.virustotal.com/latest-report.html?resource=a3a371199300944059ba2b5f907f933a
http://www.virustotal.com/latest-report.html?resource=752eb9dfd724fb41ad8c4a03e5d42176

My concern is not only may these be possibly negatively affecting innocent site operators (who may not be aware Avast has them flagged) but, the flip side is that the listings are also not accurate enough for me to be able to be able to take any actions with from my end at the moment.

If I can locate trustworthy input, I would be glad to implement it.

I appreciate any assistance, thanks!

Josh

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Help with addressing some false positives
« Reply #2 on: April 17, 2015, 08:12:31 AM »
Quote
I'm sorry to ask here - but I've tried to email in the past, and I suspect Avast systems may not be receiving my mails.
avast support   https://support.avast.com