0001445: Downloading Windows installer results in false positive virus alert with avast Antivirus

Chat on our Discord Server Get the latest version: 3.2
Source Code

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Category

View Status

Date Submitted

Last Update

0001445

Site

[All Projects] Bug

public

2013-08-03 06:43

2013-09-29 10:04

Reporter

infurnus

Assigned To

infurnus

Priority

high

Severity

minor

Reproducibility

always

Status

closed

Resolution

no change required

Platform

Microsoft

Windows

OS Version

XP/Vista/7

Summary

0001445: Downloading Windows installer results in false positive virus alert with avast Antivirus

Description

Trying to download a Windows installer for 1.1 or 1.1.1 results in a false positive virus alert from avast Antivirus on Windows with "Win32:Evo-gen [Susp]"
The installers in question appear clean & have no issues or infection. Manually scanning with avast finds the files clean. Temporarily disabling avast Antivirus will allow the binaries to be downloaded & executed properly. The issue can happen in Google Chrome, Mozilla Firefox, and Opera browsers.

I do not know if this is an issue we can fix on our end, but I want to just note it so the staff is aware

Steps To Reproduce

Have Windows OS, have avast Antivirusz

Do one of the following:
* Be at zandronum.com or zandronum.com/tracker and click "Get the latest version: 1.1.1 for Windows"
* Be at zandronum.com/download/ or zandronum.com/downloads/ and download a win32 binary installer for 1.1 or 1.1.1

Additional Information

I have Windows 7 64bit and avast Antivirus
The installer for 1.0 does not seem to trigger a false positive
Manually scanning 1.1 or 1.1.1's installers with avast results with "no threat found", virustotal confirms avast finds no problems with it'https://www.virustotal.com/en/file/c0d1e191e51f94cdaa6541fb8e8070db914259da5590688a630315f70f4d3bca/analysis/ [^]'

Attached Files

Relationships

Notes
(0006903) someoneelse (reporter) 2013-08-03 19:17 edited on: 2013-08-03 19:20	Happened to me as well... File was blocked before it even found itself on download list, which is a bit weird. (win xp, firefox)

(0006914) Monsterovich (reporter) 2013-08-05 21:44 edited on: 2013-08-05 21:45	Method №1: - Delete antivirus Method №2: - Delete antivirus Method №3: - F*ck brain more - Delete antivirus

(0006919) someoneelse (reporter) 2013-08-06 20:19	Newbie which came here first time and downloads a file won't DELETE ANTIVIRUS LOL but rather leave to some odamex or other zdaemon.

**Issue Community Support**
This issue is already marked as resolved. If you feel that is not the case, please reopen it and explain why.
Supporters:	infurnus
Opponents:	No one explicitly opposes this issue yet.

Issue History
Date Modified	Username	Field	Change
2013-08-03 06:43	infurnus	New Issue
2013-08-03 19:17	someoneelse	Note Added: 0006903
2013-08-03 19:20	someoneelse	Note Edited: 0006903	View Revisions
2013-08-05 21:44	Monsterovich	Note Added: 0006914
2013-08-05 21:45	Monsterovich	Note Edited: 0006914	View Revisions
2013-08-05 21:45	Monsterovich	Note Edited: 0006914	View Revisions
2013-08-06 20:19	someoneelse	Note Added: 0006919
2013-09-29 10:04	infurnus	Status	new => closed
2013-09-29 10:04	infurnus	Assigned To	=> infurnus
2013-09-29 10:04	infurnus	Resolution	open => no change required

Questions or other issues? Contact Us.

Links

Doom and Doom II are the property of id Software.