Bug 1828949 - Problem downloading Fedora 32 ISO - AVAST antivirus package on Windows 10 64bit machine aborted the download of "Fedora 32 Workstation ISO", saying that "Fedora.Mirror.Garr.it" was infected with Win64:Evo-gen"
Summary: Problem downloading Fedora 32 ISO - AVAST antivirus package on Windows 10 64b...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: mirrorlist-server
Version: 32
Hardware: x86_64
OS: Windows
unspecified
urgent
Target Milestone: ---
Assignee: Paulo Andrade
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-04-28 16:07 UTC by Matthew
Modified: 2020-05-04 13:50 UTC (History)
7 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2020-04-28 16:35:19 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Matthew 2020-04-28 16:07:10 UTC
Description of problem:  
The mirror containing the Fedora 32 Workstation ISO, "Fedora.Mirror.Garr.it" seems to be infected with a virus according to Avast Anti-virus application running on my Windows 10 64bit machine.  Avast therefore aborted the connection to the Mirror site and stopped the download.  Avast says the mirror is infected with "Win64:Evo-gen[susp]".


Version-Release number of selected component (if applicable):
Fedora 32 Workstation ISO

How reproducible:  
Second time I tried to download the Fedora32 Workstation ISO, it started to download but then Avast blocked the download after a few seconds, saying the mirror was infected with "Win64:Evo-gen[susp]". 
 This second downloas was comming from the mirror "ftp.stud.hs-esslingen.de".


Steps to Reproduce:
1.  Go to Fedora website to locate the download links.
2. Select the Workstation ISO download link and start download.
3. Wait a few seconds and then Avast pops up with a warning and terminates the download and connection to mirror.

Actual results:
Avast antivirus application blocks the connection to the ISO download site/mirror after the download has started, effects more than one mirror.


Expected results:
Download once started should continue until finished.

Additional info:
Running the download from a windows 10 64 bit machine, with all updates applied for windows10 and Avast is upto date too.

Comment 1 Matthew 2020-04-28 16:23:50 UTC
I was downloading the 64 bit ISO "Fedora 32: x86_64 DVD ISO" found under Download Fedora Workstation.  Each time I start a download the download targets a different mirror and each so far has the same problem where Avast pops up and blocks the download after it's started.

Tried to select a module in report to reflect it's the ISO on the mirror host site that's triggering the problem.

Comment 2 Adrian Reber 2020-04-28 16:35:19 UTC
Avast needs to fix their scanner to not report this. Closing it as I think there is unfortunately nothing we can do on our side.

Comment 3 Adrian Reber 2020-04-28 16:46:52 UTC
I submitted it as a false positive here: https://www.avast.com/en-us/false-positive-file-form.php

Comment 4 Adrian Reber 2020-05-04 13:50:45 UTC
I just got an answer from Avast that they updated their virus database. Should be fixed now.


Note You need to log in before you can comment on or make changes to this bug.