« previous next »
Pages: [1]   Go Down

Author Topic: Wrong positive JS:Downloader-JS ?  (Read 6438 times)

0 Members and 1 Guest are viewing this topic.

Alexcaid

  • Guest
Wrong positive JS:Downloader-JS ?
« on: January 21, 2010, 08:44:26 PM »
I am browsing hZZp://wXw.boursorama.com and it detects this trj.

Is it right or wrong ?
« Last Edit: January 21, 2010, 08:55:50 PM by Alexcaid »
Logged

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89014
  • No support PMs thanks
Re: Wrong positive JS:Downloader-JS ?
« Reply #1 on: January 21, 2010, 08:51:11 PM »
The web shield has been very accurate in its detections, I have just visited that page using firefox 3.5.7 and no alerts from avast. So it may have been removed.

So is this the full path of the alert ?
If not post it but make a not of the comment below.

- Please 'modify' your post change the URL from http to hXXp or www to wXw, to break the link and avoid accidental exposure to suspect sites, thanks.
Logged
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Alexcaid

  • Guest
Re: Wrong positive JS:Downloader-JS ?
« Reply #2 on: January 21, 2010, 09:00:09 PM »
Hi,

Thanks for your quick reply.

Name of the file: hZZp://img.boursorama.com/js/framework/bourso-1252589761.js
Version VPS: 100121-1, 21/01/2010

I called the company's call center, they told me other clients did call them, about 30, having the same alert since 7pm30 Paris time.

Their IT team is already analyzing the problem since an hour, but does not exclude a wrong positive (prefered option in fact).
They take this really seriously as this is a Bank. The French leading online bank in fact ...

Alex.
Logged

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Wrong positive JS:Downloader-JS ?
« Reply #3 on: January 21, 2010, 09:14:46 PM »
Quote
The web shield has been very accurate in its detections, I have just visited that page using firefox 3.5.7 and no alerts from avast. So it may have been removed.
Using IE8 the alarm goes off

21.01.2010 21:11:11   
hxxp://img.boursorama.com/js/framework/bourso-1264102064.js [L] JS:Downloader-JS [Trj] (0)
Logged

Alexcaid

  • Guest
Re: Wrong positive JS:Downloader-JS ?
« Reply #4 on: January 21, 2010, 09:18:57 PM »
Looks like this website is not the only one which has the problem. Google Docs too (see link bellow).

hXXp://www.google.com/support/forum/p/Google+Docs/thread?tid=06f8a735e5e5aebc&hl=en

Same issue ?

So, is their a problem on Boursorama web site or is it Avast ?
Logged

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Wrong positive JS:Downloader-JS ?
« Reply #5 on: January 21, 2010, 09:23:59 PM »
« Last Edit: January 21, 2010, 09:26:37 PM by Pondus »
Logged

Offline jsejtko

  • Avast team
  • Full Member
  • *
  • Posts: 171
    • ALWIL Software
Re: Wrong positive JS:Downloader-JS ?
« Reply #6 on: January 21, 2010, 09:26:48 PM »
Will be fixed in new vps update in about 30 minutes. I'll inform you after it will be out.

Updated: You may update your avast -> fix is already available in VPS version 100121-02. I'm sorry for any inconvenience.
« Last Edit: January 21, 2010, 10:17:03 PM by jsejtko »
Logged

emantoyaks

  • Guest
Re: Wrong positive JS:Downloader-JS ?
« Reply #7 on: January 22, 2010, 03:40:57 AM »
Alwil Team kindly improve your Virus database so that the client will not complained...^^

and avoid false alarm thank you...
Logged
Pages: [1]   Go Up
« previous next »