Avast keeps detecting malware

Red Fighter 1073 · 01-03-2013, 06:54 PM

I use Avast Antivirus and have been browsing through Google Chrome. What's been odd is that every time I visit a new page on websites like Twitch.tv and Codeacademy (definitely websites that shouldn't be worrisome for malware) I get notifications from Avast that it blocked malware every time I reload or visit a new page on these websites.

I've tried using Firefox and it has the same problem. I've used these websites for over a week and it's only just today that I've been getting these malware warnings. The malicious url is basically something cloudfront.net/42/eum/rum.js

Any ideas on what I can do to get rid of this?

Bells · 01-03-2013, 07:35 PM

Honestly the first step would be get rid of avast as fast as humanly possible.

Then, get Malwarebytes (it's freewaer) and a new Anti Virus.

synkr0nized · 01-03-2013, 10:02 PM

That's not really advice. I mean, it's not as if Avast is a terrible program or outdated, such as HijackThis! or, as seems to be the increasing case as months go by, Spybot. That said, MBAM is a great utility every Windows user should have regardless.

It looks like a false-positive triggered by the behaviors of the tracking script (as that's often what cloudfront javascript does).

I suspect Avast devs will address it accordingly, but you could look into blocking tracking -- for example, in Firefox this is handled easily with the "Adblock Plus" addon and/or Noscript depending on the type. I believe the same groups maintain versions for Chrome, but if not I am sure someone else does.

In any case, I highly recommend such browser addons regardless. You'll love not having to sit through ads and commercials on YouTube or whatever sites you visit and can prevent scripts not necessary to the function of the site from even running. Just be a doll and whitelist sites that you want to support (and NPF if you want to see our user ad banners -- we have no real advertising or tracking and nothing external being pulled in, so no worries there!).

Just keep in mind that the more you whitelist/allow, the less useful the addons can be. I recommend only issuing temporary permission until you decide a site/domain is something you visit enough to not want to have to do that every time you visit.

Krylo · 01-03-2013, 10:05 PM

What it is is New Relic's Real User Monitoring, which is a tracking thing. Basically Avast counts any user monitoring/tracking shit as malicious (which it generally is) and that program tracks various things about how fast websites are loading and traffic and things like that sending information from your computer to their database.

Avast just sees it's sending information from your computer elsewhere and says nope.

Edit: Synk basically ninja'd me here.

synkr0nized · 01-03-2013, 10:13 PM

Quote:

Originally Posted by Krylo

Edit: Synk basically ninja'd me here.

None can catch my shunpo.

01-03-2013, 06:54 PM	#1
Red Fighter 1073 Rocky Wrench Join Date: Apr 2005 Posts: 1,351	Avast keeps detecting malware I use Avast Antivirus and have been browsing through Google Chrome. What's been odd is that every time I visit a new page on websites like Twitch.tv and Codeacademy (definitely websites that shouldn't be worrisome for malware) I get notifications from Avast that it blocked malware every time I reload or visit a new page on these websites. I've tried using Firefox and it has the same problem. I've used these websites for over a week and it's only just today that I've been getting these malware warnings. The malicious url is basically something cloudfront.net/42/eum/rum.js Any ideas on what I can do to get rid of this? __________________ My Sprite Sheet/Mafia Roles

01-03-2013, 07:35 PM	#2
Bells That's so PC of you Join Date: Sep 2004 Location: In a Server-sided Dimension where time is meaningless Posts: 10,490	Honestly the first step would be get rid of avast as fast as humanly possible. Then, get Malwarebytes (it's freewaer) and a new Anti Virus. __________________ *BELLS STORE : Clothes! You wear* them! Free US Shipping Subscription System? WTF?! Zazzle Black!**

01-03-2013, 10:02 PM	#3
synkr0nized synk-ism Join Date: Nov 2003 Location: throughout the Wired Posts: 6,857	It's likely got similar behavior to genuine malware. That's not really advice. I mean, it's not as if Avast is a terrible program or outdated, such as HijackThis! or, as seems to be the increasing case as months go by, Spybot. That said, MBAM is a great utility every Windows user should have regardless. It looks like a false-positive triggered by the behaviors of the tracking script (as that's often what cloudfront javascript does). I suspect Avast devs will address it accordingly, but you could look into blocking tracking -- for example, in Firefox this is handled easily with the "Adblock Plus" addon and/or Noscript depending on the type. I believe the same groups maintain versions for Chrome, but if not I am sure someone else does. In any case, I highly recommend such browser addons regardless. You'll love not having to sit through ads and commercials on YouTube or whatever sites you visit and can prevent scripts not necessary to the function of the site from even running. Just be a doll and whitelist sites that you want to support (and NPF if you want to see our user ad banners -- we have no real advertising or tracking and nothing external being pulled in, so no worries there!). Just keep in mind that the more you whitelist/allow, the less useful the addons can be. I recommend only issuing temporary permission until you decide a site/domain is something you visit enough to not want to have to do that every time you visit. __________________ Find love. Last edited by synkr0nized; 01-03-2013 at 10:08 PM.

01-03-2013, 10:05 PM	#4
Krylo The Straightest Shota Join Date: Nov 2003 Location: It's a secret to everybody. Posts: 17,789	What it is is New Relic's Real User Monitoring, which is a tracking thing. Basically Avast counts any user monitoring/tracking shit as malicious (which it generally is) and that program tracks various things about how fast websites are loading and traffic and things like that sending information from your computer to their database. Avast just sees it's sending information from your computer elsewhere and says nope. Edit: Synk basically ninja'd me here. __________________ I am very tired.