7.1.2 Upgrade Download Gives Avast Virus Alert

http://www.avast.com/en-us/lp-fr-virus-alert?p_ext=chrome&utm_campaign=Virus_alert&utm_source=prg_fav_80_0&utm_medium=prg_systray&utm_content=.%2Ffa%2Fen-us%2Fvirus-alert-default&p_vir=PHP:Agent-MN%20[Trj]&p_prc=C:Program%20Files%20%28x86%29Mozilla%20Firefoxfirefox.exe&p_obj=http://get.boonex.com/Dolphin-Patch-v.7.1.2|Dolphin-Patch-v.7.1.2incclassesBxDolProfileFields.php&p_var=.%2Ffa%2Fen-us%2Fvirus-alert-default&p_pro=0&p_vep=8&p_ves=0&p_lqa=0&p_lsu=24&p_lst=0&p_lex=86&p_lng=en&p_lid=en-us&p_elm=7&p_vbd=1483

This happened when I tried to download the 7.1.2 patch for upgrade. Trojan warning as a php file. This has never happened before.

I had a module on 7.09 that did the same thing with Avaste and two other anti-virus programes. My site was blacklisted by them, and i was forever recieving e-mail from potential members that were affraif to join the site or could not get access to it.

I removed the module, waited a few months and i am now no longer blacklisted. But, yest, there is something in dolphin somewhere that makes this happen under cirtain circumstances I think....

Nathan

Hello my norton did not find avast virus much abused especially for PHP files in my opinion you should buy an anti virus paying! I recommend Kaspersky or Norton

Seems most Dolphin versions have a flag or two from various AV makers.  May be related to the obfuscation.

What a scary story DRautenbach. I certainly do not want blacklisted by any. Perhaps Boonex can contact them on this issue for the false alarm to prevent unwanted reputation for its users?

False positives for Avast and AVG are quite common. A lot of webmasters get stuck dealing with it once in a while. It happens. And can happen with any software. Not just dolphin.

Yeah I know its safe. I have to disable the AV just to download it. Maybe once I get it on my desktop I will know which file is the trigger.

Thank you for the report.

This is false positive alert.

I've already submitted it to Avast.

 Please keep it simple... lmao. I, of course had to look that up. 

@AlexT - Thanks

@Nathon- Also Thanks (taught me a new word). It was made to confuse this human clearly.

@Newton - LOL

Yes disable  avast then download fix it..

 
Was the module or a portion of it encrypted or obfuscated?

In the update for 7.1.2 the line that is triggering avast is in BxDolProfileFields.php line 478. It is the coding in the preg_match thats triggering the alert.