Script: SNH-gen (Trj)
Process: www.firefox.exe
Webshield: Connection Aborted
Threat Type: Budget Plug-Ins.
Using Firefox, I went to ‘Budget Auto Center Coquitlam-Port Moody,’ which is an auto repair shop in British Columbia, Canada.
The pop-up, with the above specs, appeared on the homepage.
Q1: Is it a false positive?
A:
Q2: Also, why is the title of my post grayed out in the list?
A:
Thx!
First. Test the website is actually clean here: VirusTotal and/or here: https://sitecheck.sucuri.net/
If clean, submit a false positive form to Avast from here: Choose Your Sample Submission Type | Avast
Note: I am just another user, not an Avast team member or anything.
The title of a post in the list goes grey when you have viewed it.
(This is my first time using the Virus Total service).
Result:
‘No security vendors flagged this URL as malicious.’
Specifically, under ‘Security Vendor Analysis,’ 68 vendors confirmed ‘Clean’ and there was a green check-mars beside each one.
Please answer each question separately.
*Is it likely a false positive?
A:
*I would have to ‘revisit’ the homepage twice, in order to paste the URL to Virus Total ‘and’ to submit a form to Avast-Since the pop-up will be displayed twice, is it a bad idea to keep visiting the website?
A:
*Is it best to avoid this website until the issue has been fixed?
A:
*After the ‘Thank You For Your Submission’ page, how do I navigate back to the Forum?
A:
*Since I included my email addy in the form, will I receive a personalized response (whether itg is a False Positive) once it has been analyzed?
A:
(This was my first time using the Virus Total service).
Result:
‘No security vendors flagged this URL as malicious.’
Specifically, under ‘Security Vendor Analysis,’ 68 vendors confirmed ‘Clean’ and there was a green check-mark beside each one.
Please answer each question separately.
*Is it likely a false positive?
A:
*I would have to ‘revisit’ the homepage twice, in order to paste the URL to Virus Total ‘and’ to submit a form to Avast-Since the pop-up will be displayed twice, is it a bad idea to keep visiting the website?
A:
*Is it best to avoid this website until the issue has been fixed?
A:
*After the ‘Thank You For Your Submission’ page, how do I navigate back to the Forum?
A:
*Since I included my email addy in the form, will I receive a personalized response (whether it is a False Positive) once it has been analyzed?
A:
*Update: It ‘must’ be a FF-specific False Positive issue because, one, the page layout is incomplete and, two, the link opens ‘completely and without issue’ in Opera.
Give Avast at least 48hrs to consider your submission. They will not reply to you unfortunately, so the only way to tell if they have acted on FP is by testing it again yourself after that time.
Rocksteady:
Thank you for your continued interest in my post.
Please answer each question separately:
*Based on the ‘Stat Results’ that I posted, is it likely a False Positive?
A:
*I would have to ‘revisit’ the homepage twice, in order to paste the URL to Virus Total ‘and’ to submit a form to Avast-Since the pop-up will be displayed twice, is it a bad idea to keep visiting the website?
A:
*Is it best to avoid this website until the issue has been fixed?
A:
*After the ‘Thank You For Your Submission’ page, how do I navigate back to the Forum?
A:
*Based on the ‘Stat Results’ that I posted, is it likely a False Positive?
A:It is likely, but will be up to Avast to confirm and make a change
*I would have to ‘revisit’ the homepage twice, in order to paste the URL to Virus Total ‘and’ to submit a form to Avast-Since the pop-up will be displayed twice, is it a bad idea to keep visiting the website?
A:As Avst will not reply to your FP report, the only way to test that they have white listed it is to visit the website again.
*Is it best to avoid this website until the issue has been fixed?
A:See my answer above, but suggest you give Avast at least 2 working days to review before re-visiting
*After the ‘Thank You For Your Submission’ page, how do I navigate back to the Forum?
A: You have obviously got back to the forum as you have made this post since submitting yiour FP. Here is a link https://community.avast.com/
If you continue getting the Avast pop-up, please post a screenshot of it, including the “Show Details” part.
The ‘Show Details’ specs were included in my ‘original’ post above:
Script: SNH-gen (Trj)
Process: www.firefox.exe
Webshield: Connection Aborted
Threat Type: Budget Plug-Ins.
The ‘Virus Total’ form was submitted on Wed and, as of today, the website continues to display the popup.
That is not a screenshot, just the same text as before, which does not help.
FYI. You can upload a screenshot picture using the “Upload” tool (6th from left) on the Reply box toolbar.
For now, I will not be navigating to that website.