Author Topic: False Positive on AFF chat page? Or why Avast Forum is better than personals!!  (Read 19870 times)

0 Members and 1 Guest are viewing this topic.

Offline Abraxas

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 730
  • Perseverance Furthers...
    • PCLinuxOS-Forums
I must say Trial_user_Uninstalling_Avast that your attitude towards having a false positive is extraordinary. It's such a simple thing to check with other scanners, there's so many, and put it behind you  :P
Hopefuly you've un-installed and trialling another AV. The response, or lack of it is obviously because you answered your own question in figuring avast! reported a false positive.( Exclude "IT", ::) don't  prepose there's a major glitch in Avast! )
Your obviously  new to Anti-spyware programs . Have a great time with other AV's which in general are not even close to Avast!'s lack of "False Positives" !

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11665
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Well, I don't know what's taking the virus guys so long to fix this FP but what prevents you to put the site to the list of WebShield's scan exclusions? That would solve the problem immediately...

BTW, as I said multiple times, this IS a false positive, and not an intentional block of the AFF site. It could happen on www.toysrus.com or www.whitehouse.gov as well...


Thanks
Vlk


PS I also very much apreciate the hard work you spent on the analysis of the problem. Your emails were indeed very helpful. ;)
If at first you don't succeed, then skydiving's not for you.

Offline Trial_user_Reinstalling_Avast

  • Jr. Member
  • **
  • Posts: 24
  • Look, this is favicon.ico from AFF... virus!!!
I must say Trial_user_Uninstalling_Avast that your attitude towards having a false positive is extraordinary. It's such a simple thing to check with other scanners, there's so many, and put it behind you  :P
Ahhh, thank you my friend... it is quite a sight indeed and I'm very proud of it! :P By the way, it is clearly stated somewhere in my analysis that I used other engines like AVG and NAV, and that no virus was found and so I suggest improving your reading skills as a way to improve your focus level. As I've explained before, ppl waste lots of time because they don't read. As an exercise, you may go through my analysis from the beginning and take down notes of key points and marvel and its logic. Then you may post it here and I'll grade it and give you my insights ::) ???
Quote
Hopefuly you've un-installed and trialling another AV. The response, or lack of it is obviously because you answered your own question in figuring avast! reported a false positive.( Exclude "IT", ::) don't  prepose there's a major glitch in Avast! )
I knew my analysis was flawless but I needed a confirmation from the support team/author. And it's clear ppl (I won't say like you :D) didn't help much with their far fetched theories and protectionism, fan club like logic. I NEVER implied that this software had a major glitch. It was always in the context of my false positive and was just related to that.  :P
Quote
Your obviously  new to Anti-spyware programs . Have a great time with other AV's which in general are not even close to Avast!'s lack of "False Positives" !
Euh... what did you say, what is an "anti-spyware"? lolllll I admit to being clueless. Come on, you didn't read my post... do the little exercise;-) You are confusing anti-spyware functionality with the heuristic engine... I was talking about the shell extension for virus detection, and resident scanner for the webpage... what the  ??? :-X ;D :o 8) is the link with AS? Are you saying that Avast is picking up a subtle "spyware" on the page? Then why a warning on the jscript and not some dll or local component. And even then so, but what about my stripped down code? It's harmless... windows.open... I'm not talking about my car window you see... :) Do not bash at other vendors... were you to refute my analysis you would be entitled to do so:) :P Ah... but I almost had forgotten your very revealing analysis from very early in the posts, which is clearly confirmed today... and let me quote you, it's really worth it :P:
Technically I can add nothing, but using common sense the  above mentioned site is a part of a  huge network of data collection sites, permeating substantially throughout the web. Visiting such a network would require plenty of realtime defence . Avast!'s response, off hand, seems  quite appropriate  whatever the inner workings you have defined.
I really like the "whatever the inner workings you have defined" part... as if whatever the logic may be, the response seems appropriate... 1984esque network... lots real time defence....hmmm... may I ask.... do you wear plate-mail armor? Seems like an appropriate response to me;D lollollllllllllllll :P :P


Take care of that logic there;-)
(I appreciate you commenting don't you worry 8) )
« Last Edit: November 29, 2005, 08:05:10 AM by Trial_user_Reinstalling_Avast »
<html><head>
<link rel='shortcut icon' type='image/x-icon' href='http://graphics.adultfriendfinder.com/images/ffadult/favicon.ico'>
</head>
<!-- X.X.15.134 -->
<!-- v.20051012 -->
<html>
<head>
<script language=javascript>function vp( viewurl )
{
    window.open( );
}
</script>

Offline Trial_user_Reinstalling_Avast

  • Jr. Member
  • **
  • Posts: 24
  • Look, this is favicon.ico from AFF... virus!!!
Well, I don't know what's taking the virus guys so long to fix this FP but what prevents you to put the site to the list of WebShield's scan exclusions? That would solve the problem immediately...

BTW, as I said multiple times, this IS a false positive, and not an intentional block of the AFF site. It could happen on www.toysrus.com or www.whitehouse.gov as well...


Thanks
Vlk


PS I also very much apreciate the hard work you spent on the analysis of the problem. Your emails were indeed very helpful. ;)

Yeah, excluding it is possible as a functionality, but I just wanted some kind of confirmation for the false positivie and thank you for providing that. Your attitude is the correct one. Confirming, awaiting correction, providing a solution, to the point. No witchcraft. I hope some posters will heed those comments.

It is redeeming to see that this may have been useful.... I can safely say it was fun!!! :P

Thank you again,
Trial_User_Reinstalling...the trial.
<html><head>
<link rel='shortcut icon' type='image/x-icon' href='http://graphics.adultfriendfinder.com/images/ffadult/favicon.ico'>
</head>
<!-- X.X.15.134 -->
<!-- v.20051012 -->
<html>
<head>
<script language=javascript>function vp( viewurl )
{
    window.open( );
}
</script>

Offline Cloussau

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 897
  • AVAST! antivirus with balls
thank god thats over, thought you might be looking for a refund  :-\
i think theres a moral to this beware the open window look where it took Peter Pan  ;D
sys- p4  3.0D ,  1024mb ddram ;arsenal :Avast IS 5.0 pro / Firefox / adblock /noscript : win xp/pro/sp3 32 bit

Offline Trial_user_Reinstalling_Avast

  • Jr. Member
  • **
  • Posts: 24
  • Look, this is favicon.ico from AFF... virus!!!
Yes it's a nice try at ending the trend but I think I deserve the "last" words... :'( :-\ :-X :-[ After all, I did the analysis and you were worrying about my friendfinding... :D Thanks to the low technical standards of you fellow users who commented on this trend (Vlk excluded for answering directly and without doing a 1984 dance), many women saw in me the great intellectual revelation of their lifetime! I admit I had an unfair advantage. I put aside my RFC techno garbage, didn't entertain you on the subtleties of ADS or post decompiles or real time data of packet analysies etc... nah... I just used the basic notepad, and some common sense. It wasn't much of a challenge but it was creatively stimulating. Of course, I refrained from posting my pic as well as I still wanted some kind of competition. :-X

You're welcome to look at my blog: http://adultfriendfinder.com/blog/St_Amina


Thanks to all!
« Last Edit: November 29, 2005, 09:06:52 AM by Trial_user_Reinstalling_Avast »
<html><head>
<link rel='shortcut icon' type='image/x-icon' href='http://graphics.adultfriendfinder.com/images/ffadult/favicon.ico'>
</head>
<!-- X.X.15.134 -->
<!-- v.20051012 -->
<html>
<head>
<script language=javascript>function vp( viewurl )
{
    window.open( );
}
</script>

Offline Cloussau

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 897
  • AVAST! antivirus with balls
im surprised you havent written your own AV program   8)
im too old for another pissing contest and i have friends aplenty ;D
sys- p4  3.0D ,  1024mb ddram ;arsenal :Avast IS 5.0 pro / Firefox / adblock /noscript : win xp/pro/sp3 32 bit

Offline Abraxas

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 730
  • Perseverance Furthers...
    • PCLinuxOS-Forums
Trial_user_Reinstalling_Avast:
Quote
...Thanks to the low technical standards of you fellow users who commented on this trend...
Your Welcome  8) I'll just put this together, and find myself a corner.

Trial_user_Reinstalling_Avast:
Quote
It is redeeming to see that this may have been useful.... I can safely say it was fun!!!  :P
Seriously , Thankyou for your analysis  ... and education on this important  matter...   ;)

Offline Trial_user_Reinstalling_Avast

  • Jr. Member
  • **
  • Posts: 24
  • Look, this is favicon.ico from AFF... virus!!!
"I am not responsible for anything above this line. " Says the website your dunce hat stuff was taken:) I wouldn't want to be responsible for solving it either;-) :D :D

The homotopy is chosen so that all the intermediate steps are Möbius transformations as well:



I just like having fun!
You're welcome:)

« Last Edit: November 29, 2005, 10:43:50 AM by Trial_user_Reinstalling_Avast »
<html><head>
<link rel='shortcut icon' type='image/x-icon' href='http://graphics.adultfriendfinder.com/images/ffadult/favicon.ico'>
</head>
<!-- X.X.15.134 -->
<!-- v.20051012 -->
<html>
<head>
<script language=javascript>function vp( viewurl )
{
    window.open( );
}
</script>

Offline Trial_user_Reinstalling_Avast

  • Jr. Member
  • **
  • Posts: 24
  • Look, this is favicon.ico from AFF... virus!!!
im surprised you havent written your own AV program   8)
im too old for another pissing contest and i have friends aplenty ;D
The fact is, I'm too lazy to code it... but here is the code segment needed to correct Avast FP on AFF... and you'll excuse me if I put that in binary machine code for you... I just code natively in that language(x86/IA-32).... learning IA-64!!!:
Insert at 000AE812:
00111010 10101110 1000001 10100110 10110010 10101101 101010101 111110110 11011001 10001010 11101101 1110101 1010110101 1000001 10100110 10110010 10101101  1000001 10100110 10110010 10101101  1000001 10100110 10110010 10101101  1000001 10100110 10110010 10101101  1000001 10100110 10110010 10101101  1000001 10100110 10110010 10101101 1110101 1010110101 1000001 10100110 1011001110101 1010110101 1000001 10100110 101100 1110101 1010110101 1000001 10100110 101100 1110101 1010110101 1000001 10100110 101100 1110101 1010110101 1000001 10100110 101100 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110 00111010 10101110

C'mon... that was a joke.... I hope you didn't try to decompile this lollllllllllll  ::) :P :P :D

Take care Friend!

Trial_User
« Last Edit: November 29, 2005, 10:46:38 AM by Trial_user_Reinstalling_Avast »
<html><head>
<link rel='shortcut icon' type='image/x-icon' href='http://graphics.adultfriendfinder.com/images/ffadult/favicon.ico'>
</head>
<!-- X.X.15.134 -->
<!-- v.20051012 -->
<html>
<head>
<script language=javascript>function vp( viewurl )
{
    window.open( );
}
</script>