centrum.cz attachments: network shield false positive

Had an issue yesterday evening, that user claims she got a “virus” and she cannot open attachments in centrum.cz e-mail - Avast always said it’s a virus and terminated the connection

it turns out that the “mail.centrum.cz/download.php?..” url is considered to be a source of virus URL:M by the Avast network shield

-maybe because many people downloaded the virus from attachment, some automated logic decided “this URL contains virus”, but it is a general URL to download the web-based mail client attachments

I had to disable network shield to temporary solve this, waiting for avast definition update.

Nothing found on http://sitecheck.sucuri.net/scanner/, nor on http://www.urlvoid.com/scan/mail.centrum.cz, nor on http://urlquery.net/report.php?id=9885.

There is an on-line contact form, http://www.avast.com/contact-form.php?loadStyles for: * Sales inquiries; Technical issues; Website issues; Report false virus alert in file; Report false virus alert on website; Undetected Malware; Press (Media), issues.

  • If you are reporting an FP, then you get another input field open, enter the web URL for the site you wish to submit for Network Shield review, etc. A link to this topic also wouldn’t hurt.

Thanks for the info David. I filled in the form, but when I clicked the “send message” button, the text just disappeared and a new form appeared, without any feedback (something like “thanks, we got your report”). Tried again in Internet Explorer with the same result. I am now at work, maybe our web browsing policy blocks something, I will try this again home. Or maybe it’s a “feature” of the form and Avast now has a successful report.

You’re welcome.

Yes, that is the default action and I agree it should give a confirmation page, but I’m just an avast user unable to change that.

Hello,
this should be fixed in current VPS (111129-1).

Milos

Thanks for the prompt response Milos.

Whilst I’m not able to reach the original URL reported, I am able to get to the login page and no alert from avast with 111129-1 VPS.

hello Milos,

thank you for the fix

-Daniel