Author Topic: False Positives?  (Read 3741 times)

0 Members and 1 Guest are viewing this topic.


Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: False Positives?
« Reply #1 on: June 10, 2016, 01:42:38 AM »
URL:Mal = Blacklisted url or IP

It may be ads on the pages you visit

You can check urls for blacklisting here  www.virustotal.com

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: False Positives?
« Reply #2 on: June 10, 2016, 10:01:51 AM »
Hi,
I found an explanation of what might be happening: https://mikewest.org/2012/02/chrome-connects-to-three-random-domains-at-startup
The question is, why is this request blocked by Avast. Do you have the latest version of Avast and the latest version of VPS? Can you check the contents of your etc/hosts file to see if there is any redirection?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: False Positives?
« Reply #3 on: June 10, 2016, 10:11:11 AM »
There seem to be a problem on the server of that mikewest site.
Opera isn't opening the site at all while using FireFox avast blocks it.
« Last Edit: June 10, 2016, 12:37:36 PM by Eddy »

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2294
Re: False Positives?
« Reply #4 on: June 10, 2016, 12:50:01 PM »
« Last Edit: June 10, 2016, 12:54:53 PM by Milos »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: False Positives?
« Reply #5 on: June 10, 2016, 02:17:54 PM »
Yes, that is on a XP system.

REDACTED

  • Guest
Re: False Positives?
« Reply #6 on: June 12, 2016, 09:22:36 PM »
Hi,
I found an explanation of what might be happening: https://mikewest.org/2012/02/chrome-connects-to-three-random-domains-at-startup
The question is, why is this request blocked by Avast. Do you have the latest version of Avast and the latest version of VPS? Can you check the contents of your etc/hosts file to see if there is any redirection?

I am using Avast Mac Security 2015
Version 11.12 (46528)
Virus Definitions 116060901

That’s in interesting description of what Google Chrome does every time it starts up. Thing is, I have been using Avast for Mac for quite some time now, and Google Chrome has been my primary browser for quite some time. So why is this just happening now?

Also, I would assume that the people at Avast might know the Chrome browser does this, and not flag these random URL’s as threats.

I checked etc/hosts and there is no redirection.


Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: False Positives?
« Reply #7 on: June 13, 2016, 09:52:35 AM »
We do not flag those exact URLs. Perhaps something on the way is redirecting you to the blocked URL (your ISP, for example)? Can you check if the same PC does it when plugged into a different network / ISP?