Author Topic: False Positive? Avast has blocked Netcraft browser extension  (Read 2246 times)

0 Members and 1 Guest are viewing this topic.

Offline loungehake

  • Dummy Half
  • Poster
  • *
  • Posts: 427
  • Come on lad! You've only got 70 yards to go.
False Positive? Avast has blocked Netcraft browser extension
« on: January 22, 2023, 03:09:46 PM »
I use the Netcraft browser extension. Avast has suddenly declared it a phishing hazard. I thought that Netcraft was an internet security business of high repute.

I have found and submitted a report on the Avast false positive form.
« Last Edit: January 22, 2023, 07:08:53 PM by loungehake »
Windows 10 Pro 22H2 x64, Avast Free 24.4.6112, Malwarebytes Anti-Exploit, Malwarebytes Anti-Ransomware

Offline constipatedapples

  • Newbie
  • *
  • Posts: 3
Re: False Positive? Avast has blocked Netcraft browser extension
« Reply #1 on: January 22, 2023, 08:56:56 PM »
Its really getting on my tits now , they better sort it soon.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89211
  • No support PMs thanks
Re: False Positive? Avast has blocked Netcraft browser extension
« Reply #2 on: January 22, 2023, 09:24:29 PM »
What would be of help is a screenshot of the avast alert window with the details option displayed.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline constipatedapples

  • Newbie
  • *
  • Posts: 3
Re: False Positive? Avast has blocked Netcraft browser extension
« Reply #3 on: January 22, 2023, 11:05:56 PM »
This is the screenshot

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89211
  • No support PMs thanks
Re: False Positive? Avast has blocked Netcraft browser extension
« Reply #4 on: January 22, 2023, 11:50:02 PM »
Were you actually trying to connect to that URL  ?

It may well not be the case, it may well have been the browser extension trying to connect to that URL and not the user directly. 

You should also note that the original connection URL does a redirect to a different URL, everything after the netcraft.com/.   I can only assume (dangerous I know) that is what Avast doesn't like the redirect to /check_url/v3/hxxps/://wiki.firestormviewer.org/dodns (note the hxxps is to prevent the link being active).
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline loungehake

  • Dummy Half
  • Poster
  • *
  • Posts: 427
  • Come on lad! You've only got 70 yards to go.
Re: False Positive? Avast has blocked Netcraft browser extension
« Reply #5 on: January 23, 2023, 07:55:03 AM »
This is yer actual screenshot.

The browser extension was attempting to connect to URL mirror2.extension.netcraft.com.  I had no problem earlier yesterday,  This is the first time I have seen a browser extension problem being flagged by Avast.  It has disrupted several people for whom I had installed the Netcraft browser extension some years ago.  I am having to talk them through disabling that extension.  I was most surprised that Netcraft has been identified as a phishing hazard. Oh lackaday!

I hope that Avast corrects the matter very soon.
« Last Edit: January 23, 2023, 08:04:25 AM by loungehake »
Windows 10 Pro 22H2 x64, Avast Free 24.4.6112, Malwarebytes Anti-Exploit, Malwarebytes Anti-Ransomware

Offline loungehake

  • Dummy Half
  • Poster
  • *
  • Posts: 427
  • Come on lad! You've only got 70 yards to go.
Re: False Positive? Avast has blocked Netcraft browser extension
« Reply #6 on: January 23, 2023, 08:06:44 PM »
Avast has rectified the problem. It happened sometime on the middle of today (Monday 23 January).
Windows 10 Pro 22H2 x64, Avast Free 24.4.6112, Malwarebytes Anti-Exploit, Malwarebytes Anti-Ransomware

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89211
  • No support PMs thanks
Re: False Positive? Avast has blocked Netcraft browser extension
« Reply #7 on: January 24, 2023, 01:00:55 PM »
Thanks for the feedback, unfortunately for whatever reason the forums have been down for a day and a bit.

I would like to hope it was maintenance to correct the forums performance issues.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline loungehake

  • Dummy Half
  • Poster
  • *
  • Posts: 427
  • Come on lad! You've only got 70 yards to go.
Re: False Positive? Avast has blocked Netcraft browser extension
« Reply #8 on: January 24, 2023, 07:50:59 PM »
Whatever I say about Avast from time to time, there is no better security software than Avast's/AVG's.  I have great confidence in them.
Windows 10 Pro 22H2 x64, Avast Free 24.4.6112, Malwarebytes Anti-Exploit, Malwarebytes Anti-Ransomware

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33926
  • malware fighter
Re: False Positive? Avast has blocked Netcraft browser extension
« Reply #9 on: January 28, 2023, 02:02:31 PM »
You could and should trust avast.

Remember also that cybercriminals now also are manipulating search-engine results,
so one will land at a fraudulous site or users, that download an extension outside checked reliable sources.

I mentioned also certification abuse recently, where pre-cert chains are being abused by malcreants.

So when visiting a bank etc. Do not go there directly from a search-engine result link, it could be a fraud scheme. So check before you leap. Forewarned is forearmed.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89211
  • No support PMs thanks
Re: False Positive? Avast has blocked Netcraft browser extension
« Reply #10 on: January 28, 2023, 05:52:24 PM »
Whatever I say about Avast from time to time, there is no better security software than Avast's/AVG's.  I have great confidence in them.

Agreed, it has been looking after my systems for 19 years (before I even first visited the forums), I have had the odd niggle.  But nothing serious and nothing security related, lucky I guess (not) :)
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security