Author Topic: Avast 7.0.1426 false positive on RSS feed with 120405-0 virus definitions (Read 4640 times)

gillest · « **on:** April 05, 2012, 03:14:39 PM »

This morning started to get these messages:

05.04.2012 14:09    NetworkShield    http://rss.cyberpresse.ca/178.xml    URL:Mal
05.04.2012 13:39    NetworkShield    http://rss.lemonde.fr/c/205/f/3050/index.rss    URL:Mal
05.04.2012 13:39    NetworkShield    http://rss.cyberpresse.ca/178.xml    URL:Mal
05.04.2012 13:24    NetworkShield    http://rss.lemonde.fr/c/205/f/3050/index.rss    URL:Mal
05.04.2012 13:24    NetworkShield    http://rss.cyberpresse.ca/178.xml    URL:Mal

Getting malware errors in Firefox 11.o with my 2 RSS feeds.

What is happening??

Using Avast Free Antivirus 7.0.1426 since it came out (with these RSS feeds) without any problems until this am.

Thanks,

DJBone · « **Reply #1 on:** April 05, 2012, 03:29:17 PM »

You can report a possible false positive here: http://www.avast.com/contact-form.php
Selecct "Report false virus alert on website"
And check the website here: www.virustotal.com

DJBone

gillest · « **Reply #2 on:** April 05, 2012, 04:22:30 PM »

Thanks,

Used the link provided to report FP.

Also went to Virustotal and checked the 2 url`s. Both came out with no issues so it is really (as I thought) a problem in the 120405-0 virus definition file.

DJBone · « **Reply #3 on:** April 05, 2012, 04:31:52 PM »

You're welcome

DJBone

Pondus · « **Reply #4 on:** April 05, 2012, 04:37:57 PM »

Zscaler IP Reputation
IP address has been identified as risky by one/more sources

http://zulu.zscaler.com/submission/show/3744fbc4e0156b87a1f79e7a3d4171cb-1333636605
http://zulu.zscaler.com/submission/show/dfccd4968d7ecd5ab366ee9bf80c3710-1333636630

gillest · « **Reply #5 on:** April 05, 2012, 05:13:54 PM »

this is just wrong. These are 2 RSS feeds from reputable websites lemonde.fr and cyberpresse.ca of two well known newspapers (France and Canada).

REDACTED · « **Reply #6 on:** April 05, 2012, 05:15:55 PM »

le même problème ! http://rss.lemonde.fr/c/205/f/3050/index.rss je n'ai pas été sur ce site !!! comment faire pour ne plus avoir l'avertissement à tout bout de champ !!! merci $:-\$

gillest · « **Reply #7 on:** April 05, 2012, 05:21:06 PM »

Attend que Avast corrige les definitions de virus ou dans ton navigateur enleve le feed RSS pour Le Monde.

gillest · « **Reply #8 on:** April 05, 2012, 05:30:53 PM »

Wondering if this was resolved using the cloud updates to the virus definitions because I no longer have the message (Avast still showing 120405-0 virus definitions).

I used to be able to show the error every time by asking for a reload of the RSS feeds but I has been unable to reproduce in the past 10 minutes?

If this is the case it is a great example of the benefits of being connected and using cloud updates.

DavidR · « **Reply #9 on:** April 05, 2012, 05:39:08 PM »

I would say it has been resolved as a corrected FP, as the streaming updates can also be used to correct FPs as well as adding important virus definitions.

Some were added only minutes ago, see image.

REDACTED · « **Reply #10 on:** April 05, 2012, 05:41:36 PM »

comment j'enlève le bidule rss le monde ? je n'y connais rien