Author Topic: url is good, avast gives false positive  (Read 1288 times)

0 Members and 1 Guest are viewing this topic.

Offline kurtwout

  • Newbie
  • *
  • Posts: 2
url is good, avast gives false positive
« on: June 16, 2020, 09:12:08 PM »
Hello, I work at Wings Software. When our customers download the file setupwingsacc.exe from https://wings.be/nl/klantenzone/installatie/installatie-lokaal (first link).   Avast will give the message "The connection to download.wingscloud.eu has been lost due to an infection with URL: Blacklist. But that file or domain is safe.

I also downloaded the file once from work that have a different antivirus, and put the file on a stick. When I installed this file at home with Avast Free, Avast first analyzed the file, but after a few seconds Avast said the file was safe. Could you mark this file as a false positive so that our customers can download the files again at https://wings.be/nl/klantenzone/installatie/installatie-lokaal

download.wingscloud.eu is safe and not a URL blacklist.
« Last Edit: June 16, 2020, 09:22:33 PM by kurtwout »

Offline Stephen1066

  • Jr. Member
  • **
  • Posts: 23
    • The History Room
Re: url is good, avast gives false positive
« Reply #1 on: June 16, 2020, 09:22:07 PM »
Hello.

You need to complete the form at https://www.avast.com/en-gb/false-positive-file-form.php

Offline kurtwout

  • Newbie
  • *
  • Posts: 2
Re: url is good, avast gives false positive
« Reply #2 on: June 16, 2020, 09:24:07 PM »
Thank you so much for your answer. Does it take long before they whitelist it?
Is it faster to call? Because now the customers cannot download the installation file...

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89029
  • No support PMs thanks
Re: url is good, avast gives false positive
« Reply #3 on: June 16, 2020, 10:34:33 PM »
Thank you so much for your answer. Does it take long before they whitelist it?
Is it faster to call? Because now the customers cannot download the installation file...

That rather depends on Avasts reanalysis of the detection.

In the meantime, Please break links to suspect sites, e.g. wings.be/nl/klantenzone/installatie/installatie-lokaal

Clear at this check https://sitecheck.sucuri.net/results/wings.be

The points raised here you should also consider https://webhint.io/scanner/637f7b4d-3a4b-4a8a-81d4-ccb70539dfc5
Some of those security issues are referencing 3rd party URL, it is possible that one of these could also trigger the alert (though not certain). 

There is also a possibility that your Host could be hosting multiple domains on the same IP address and one of those might trigger the alert.  But I don't know if that would trigger a URL: Blacklist alert or not.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security