Bug 1828949

Summary:	Problem downloading Fedora 32 ISO - AVAST antivirus package on Windows 10 64bit machine aborted the download of "Fedora 32 Workstation ISO", saying that "Fedora.Mirror.Garr.it" was infected with Win64:Evo-gen"
Product:	[Fedora] Fedora	Reporter:	Matthew <zenomorph.ebe>
Component:	mirrorlist-server	Assignee:	Paulo Andrade <paulo.cesar.pereira.de.andrade>
Status:	CLOSED NOTABUG	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	urgent	Docs Contact:
Priority:	unspecified
Version:	32	CC:	adrian, bioinfornatics, cheese, igor.raits, paulo.cesar.pereira.de.andrade, rust-sig, walter.pete
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Windows
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-04-28 16:35:19 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Matthew 2020-04-28 16:07:10 UTC

Description of problem:  
The mirror containing the Fedora 32 Workstation ISO, "Fedora.Mirror.Garr.it" seems to be infected with a virus according to Avast Anti-virus application running on my Windows 10 64bit machine.  Avast therefore aborted the connection to the Mirror site and stopped the download.  Avast says the mirror is infected with "Win64:Evo-gen[susp]".


Version-Release number of selected component (if applicable):
Fedora 32 Workstation ISO

How reproducible:  
Second time I tried to download the Fedora32 Workstation ISO, it started to download but then Avast blocked the download after a few seconds, saying the mirror was infected with "Win64:Evo-gen[susp]". 
 This second downloas was comming from the mirror "ftp.stud.hs-esslingen.de".


Steps to Reproduce:
1.  Go to Fedora website to locate the download links.
2. Select the Workstation ISO download link and start download.
3. Wait a few seconds and then Avast pops up with a warning and terminates the download and connection to mirror.

Actual results:
Avast antivirus application blocks the connection to the ISO download site/mirror after the download has started, effects more than one mirror.


Expected results:
Download once started should continue until finished.

Additional info:
Running the download from a windows 10 64 bit machine, with all updates applied for windows10 and Avast is upto date too.

Comment 1 Matthew 2020-04-28 16:23:50 UTC

I was downloading the 64 bit ISO "Fedora 32: x86_64 DVD ISO" found under Download Fedora Workstation.  Each time I start a download the download targets a different mirror and each so far has the same problem where Avast pops up and blocks the download after it's started.

Tried to select a module in report to reflect it's the ISO on the mirror host site that's triggering the problem.

Comment 2 Adrian Reber 2020-04-28 16:35:19 UTC

Avast needs to fix their scanner to not report this. Closing it as I think there is unfortunately nothing we can do on our side.

Comment 3 Adrian Reber 2020-04-28 16:46:52 UTC

I submitted it as a false positive here: https://www.avast.com/en-us/false-positive-file-form.php

Comment 4 Adrian Reber 2020-05-04 13:50:45 UTC

I just got an answer from Avast that they updated their virus database. Should be fixed now.