Description of problem: The mirror containing the Fedora 32 Workstation ISO, "Fedora.Mirror.Garr.it" seems to be infected with a virus according to Avast Anti-virus application running on my Windows 10 64bit machine. Avast therefore aborted the connection to the Mirror site and stopped the download. Avast says the mirror is infected with "Win64:Evo-gen[susp]". Version-Release number of selected component (if applicable): Fedora 32 Workstation ISO How reproducible: Second time I tried to download the Fedora32 Workstation ISO, it started to download but then Avast blocked the download after a few seconds, saying the mirror was infected with "Win64:Evo-gen[susp]". This second downloas was comming from the mirror "ftp.stud.hs-esslingen.de". Steps to Reproduce: 1. Go to Fedora website to locate the download links. 2. Select the Workstation ISO download link and start download. 3. Wait a few seconds and then Avast pops up with a warning and terminates the download and connection to mirror. Actual results: Avast antivirus application blocks the connection to the ISO download site/mirror after the download has started, effects more than one mirror. Expected results: Download once started should continue until finished. Additional info: Running the download from a windows 10 64 bit machine, with all updates applied for windows10 and Avast is upto date too.
I was downloading the 64 bit ISO "Fedora 32: x86_64 DVD ISO" found under Download Fedora Workstation. Each time I start a download the download targets a different mirror and each so far has the same problem where Avast pops up and blocks the download after it's started. Tried to select a module in report to reflect it's the ISO on the mirror host site that's triggering the problem.
Avast needs to fix their scanner to not report this. Closing it as I think there is unfortunately nothing we can do on our side.
I submitted it as a false positive here: https://www.avast.com/en-us/false-positive-file-form.php
I just got an answer from Avast that they updated their virus database. Should be fixed now.