How to resolve false positive phishing detection by Avast antivirus?
Summary
What email marketers say12Marketer opinions
Marketer from Email Geeks shares the solution to the Avast false positive issue: reporting the problem through the web form and one of the email addresses provided by Damon (<mailto:customer.support@avast.com|customer.support@avast.com>), having the customer report the issue from their business email, and attaching both a marked-as-phishing email header and a screenshot with the Avast bottom-left corner code. They got a positive answer within 24 hours.
Email marketer from HowToGeek explains how to whitelist a file or website in Avast to prevent future false positive detections. This should only be done if you are sure the file or website is safe.
Email marketer from Reddit mentions submitting the file as a false positive to Avast. They recommend providing as much detail as possible about the detection and why it's incorrect.
Email marketer from Malwarebytes Forum recommends uploading the file to VirusTotal to see if other antivirus vendors flag it. If only Avast flags it, it's more likely a false positive.
Marketer from Email Geeks shares list of where to submit false-positive phishing or virus reports today: <https://gist.github.com/skmedix/6cdce9d6d3b464c1bd719b72d1f6bce4>
Email marketer from Webmaster Forum suggests making sure your website's SSL certificate is valid and up-to-date. Invalid certificates can trigger false positive detections.
Email marketer from Cybersecurity Blog recommends running regular malware scans on your servers and computers to ensure they are not infected with malware that could be triggering the false positives.
Marketer from Email Geeks shares his experience with a client encountering Avast/AVG false positives. He recommends sending emails to <mailto:customer.support@avast.com|customer.support@avast.com> and <mailto:support@business.avast.com|support@business.avast.com> with a screenshot of the Avast code in the bottom left corner, and to send the email every hour until a response is received. It took 4 days and a CEO to CEO message before they finally took action.
Email marketer from Email Marketing Tips recommends reviewing email content for suspicious keywords or phrases that could trigger phishing filters. Reduce the use of such terms and make your email look more legitimate.
Email marketer from StackExchange suggests using a secondary AV scanner to confirm the detection. If the secondary scanner doesn't detect anything, it's more likely a false positive.
Email marketer from Avast Community Forum recommends contacting Avast support directly if the online submission doesn't resolve the issue. They may require more information or be able to provide a faster resolution.
Email marketer from Spamhaus Forum suggests checking the IP reputation of the sending server. If the IP is blacklisted, it could cause false positive detections. Use tools like Spamhaus Block List Checker.
What the experts say3Expert opinions
Expert from Word to the Wise explains to review your email content for anything that might trigger a phishing flag. This includes URL shorteners, suspicious language, and anything that might be considered 'spammy'.
Expert from Email Geeks shares the Avast website link for reporting false positives: <https://www.avast.com/false-positive-file-form.php> and explains that they maintain their own database, so direct reporting is necessary.
Expert from Spam Resource explains that when dealing with antivirus vendors and false positives, it is important to establish a line of communication and provide detailed information about the falsely flagged content.
What the documentation says4Technical articles
Documentation from SANS.org offers general advice on avoiding phishing tactics, such as checking links carefully and avoiding suspicious attachments. While not directly about false positives, following these guidelines will help to be sure you don't spread actual phishing.
Documentation from Microsoft.com explains how to submit files for analysis if Microsoft Defender is flagging them as malicious. While not directly Avast, this outlines a similar process for another major AV vendor.
Documentation from Avast.com explains that users can report false positives by submitting the file or URL to Avast's virus lab for analysis. This can be done via an online submission form.
Documentation from VirusTotal.com explains how to use their service to analyze files and URLs with multiple antivirus engines. This can help determine if a detection is a false positive.