Author Topic: Report a false detection  (Read 1498 times)

0 Members and 1 Guest are viewing this topic.

Offline mkburo

  • Newbie
  • *
  • Posts: 7
Report a false detection
« on: July 18, 2024, 05:26:30 PM »
Hello. Why does the antivirus identify site hXXps://proxyline.net as infected?
« Last Edit: July 19, 2024, 12:52:22 PM by mkburo »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89611
  • No support PMs thanks
Re: Report a false detection
« Reply #1 on: July 18, 2024, 06:10:17 PM »
Hello. Why does the antivirus identify site hXXps://proxyline.net as infected?

-  Please break active links to suspect sites to avoid accidental exposure, only post the domain-name or change the https to hXXps to break the link as I have in the quote.

Some security pointers here - https://en.internet.nl/site/proxyline.net/2888245/
4 detections here - https://www.virustotal.com/gui/url/961d8d29fc4689c48b59a37e8bb38ba5ebd2e432c350062adefd24fd6c64c40e?nocache=1
Considered a low security risk here - https://sitecheck.sucuri.net/results/proxyline.net - with some hardening improvements.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free  24.8.6127 (build 24.8.9372.862) UI 1.0.814/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline mkburo

  • Newbie
  • *
  • Posts: 7
Re: Report a false detection
« Reply #2 on: July 19, 2024, 08:52:52 AM »
I don't understand your answer. There are no viruses on this site, it is clean. But Avast shows that the site is blacklisted. How to remove it from the blacklist? I wrote to support, but they don’t answer.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89611
  • No support PMs thanks
Re: Report a false detection
« Reply #3 on: July 19, 2024, 11:41:06 AM »
The answer is pointing out what other analysis sites find.
Avast isn't alone in its alerting on it, whilst the numbers are low at VirusTotal and this doesn't run an on-demand avast scan for websites (live web site user based scans only.

The other site links point out issues that could be exploited.

These may or may not be what Avast is alerting for - but you should certainly address these.

If you think it is Possible False Positive - New location to report both a False Positive and or a False Negative (for File or URL) - https://www.avast.com/submit-a-sample#pc
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free  24.8.6127 (build 24.8.9372.862) UI 1.0.814/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline mkburo

  • Newbie
  • *
  • Posts: 7
Re: Report a false detection
« Reply #4 on: July 19, 2024, 12:51:54 PM »
I submitted false positive data via the form https://www.avast.com/submit-a-sample#pc
More than 48 hours have passed and no response has been received by email from support. What to do?

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34029
  • malware fighter
Re: Report a false detection
« Reply #5 on: July 19, 2024, 04:29:00 PM »
Website is not longer flagged by avast's.

Site is behind Sucuri Cloudproxy - IP not free of recent abuse: https://www.abuseipdb.com/check/192.124.249.61

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline mkburo

  • Newbie
  • *
  • Posts: 7
Re: Report a false detection
« Reply #6 on: July 21, 2024, 09:39:19 AM »
Website is not longer flagged by avast's.

Site is behind Sucuri Cloudproxy - IP not free of recent abuse: https://www.abuseipdb.com/check/192.124.249.61

polonus

Hello. You excluded the site hXXps://proxyline.net from the blacklist, but did not exclude the subdomain hXXps://panel.proxyline.net; it is also not infected with viruses like the main site. This is a false alarm!

Offline Misha Zekovova

  • Quality Assurance Engineer
  • Avast team
  • Jr. Member
  • *
  • Posts: 95
Re: Report a false detection
« Reply #7 on: July 21, 2024, 09:46:49 PM »
Hello,
if you believe that the page is a false positive, please report it in our page https://www.avast.com/report-false-positive and we'll take a look into this more in detail.
Thank you!

Offline mkburo

  • Newbie
  • *
  • Posts: 7
Re: Report a false detection
« Reply #8 on: July 22, 2024, 06:28:28 AM »
Hello,
if you believe that the page is a false positive, please report it in our page https://www.avast.com/report-false-positive and we'll take a look into this more in detail.
Thank you!
I reported how long to wait for the result?

Offline mkburo

  • Newbie
  • *
  • Posts: 7
Re: Report a false detection
« Reply #9 on: July 27, 2024, 01:37:11 PM »
Hello. Why is the site hXXps://panel.proxyline.net not removed from the blacklist?
More than a week has passed since I wrote to support.

Offline mkburo

  • Newbie
  • *
  • Posts: 7
Re: Report a false detection
« Reply #10 on: July 29, 2024, 10:53:44 AM »
???