Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on July 22, 2016, 11:09:03 PM

Title: What criteria used to block a website?
Post by: REDACTED on July 22, 2016, 11:09:03 PM
Greetings from the Great Country of TEXAS,

Have been working on an issue of not being able to download software from my Provider of WinAntiRanomWare for ovre a day.  Could not figure out what was preventing that download.  Could go to other sites and download with no problem, not any of the FREEBEES websites like CNN, MajorGeeks, FileHippo, et ceteras  There were NOT any popup warnings from Avast!.  This moning started testing to see if there were any 'FPs' with any of my security software, AVAST! was first.  Well to make a long story short, Avast was GUILTY.  I have been downloading software from this site for well over a year and half with no problem until yesterday.  When this software was KICKED-OFF you were contacted by this website to prevent FP on their software and I had presumed their website also. 

None of the POPups that were shown during this time did not make any references to Avast!, generic is the only title that would fit.  What am I to do to get you to not do any of this again?
Title: Re: What criteria used to block a website?
Post by: polonus on July 22, 2016, 11:23:23 PM
Hi LexCi,

Without knowing what and where you wanted to download from we are completely in the dark about this.
You could give this download location blocking the uri like with -http or hxtp etc.
Could have been the site shortly had malware there. Sometimes malcode touches a website for under a couple of hours, then to migrate somewhere else to stay under the detection radar and infest, infest. Could have been an IP ban of sorts or another of a couple of reasons, even a false positive.
The only ones that can tell you are Avast Team Members and there are now on weekend-leave, so wait for a reaction over the weekend.
We cannot help you here as we are just volunteers with relevant knowledge and we do not set detection particulars.

polonus
Title: Re: What criteria used to block a website?
Post by: DavidR on July 22, 2016, 11:29:09 PM
Essentially avast doesn't block, without there being an alert/dialogue of some kind.

I have just downloaded the latest update of WinAntiRanomWare from the source https://www.winpatrol.com/mydownloads/ (https://www.winpatrol.com/mydownloads/), winantiransom-setup.exe without issue.

So some screenshots of what is displayed when you tried to download will give something to work with.
Title: Re: What criteria used to block a website?
Post by: Eddy on July 23, 2016, 12:36:35 AM
https://www.virustotal.com/en/file/629bf9a6d52b9886427bbfd2cb9e706d4e050d00d54fd5896d50d94cb7721d61/analysis/1469226791/
Title: Re: What criteria used to block a website?
Post by: Gopher John on July 23, 2016, 01:08:08 AM
I have just downloaded the latest update of WinAntiRanomWare from the source https://www.winpatrol.com/mydownloads/ (https://www.winpatrol.com/mydownloads/), winantiransom-setup.exe without issue.

That page needs updating.  Current version is 2016-7-502.  The link there does serve the latest version.
http://www.landzdown.com/winantiransom/war-2016-7-501/ (http://www.landzdown.com/winantiransom/war-2016-7-501/)
Title: Re: What criteria used to block a website?
Post by: DavidR on July 23, 2016, 01:19:14 AM
I have just downloaded the latest update of WinAntiRanomWare from the source https://www.winpatrol.com/mydownloads/ (https://www.winpatrol.com/mydownloads/), winantiransom-setup.exe without issue.

That page needs updating.  Current version is 2016-7-502.  The link there does serve the latest version.
http://www.landzdown.com/winantiransom/war-2016-7-501/ (http://www.landzdown.com/winantiransom/war-2016-7-501/)

Not sure what the problem is that you are describing I got the latest 2016-7-502 version (earlier today) from the link I gave.
Title: Re: What criteria used to block a website?
Post by: Eddy on July 23, 2016, 01:52:00 AM
Landzone is not the official download site, WinPatrol is.
Title: Re: What criteria used to block a website?
Post by: Gopher John on July 23, 2016, 05:50:32 AM
I was simply pointing out that https://www.winpatrol.com/mydownloads/ (https://www.winpatrol.com/mydownloads/) still references WinAntiRansom v 2016.7.501, but does serve WinAntiRansom v 2016.7.502, the latest.

Landzone hosts the WinPatrol forums, as you would be aware if you followed the link.
Title: Re: What criteria used to block a website?
Post by: REDACTED on July 25, 2016, 10:45:47 AM
polonus & all other posters,

Thank you for these responses to my issue, have set the website for those downloads to the "Exclusions" listing and that did not do any good, so turned off "Active Protection" for "File System Shield" AND "Web Shield" for the duration of my downloads.  That is the only thing done to allow me do download.   Today just for test purposes was able to download WinAntiRansomWare, WinPrivacy (Failure) and WinParol (Failure) which should not be happening.  Have been using WinPatrol since about 2012 and the other two from their first day of release to the public, like about 2013 and then WinAntiRansomWare in 2014.

If the "Exclusion" is not to work as advertised then what good is it to allow what we need?

Gopher John,

If I may?  The website you reference of LandzDown is the forum to post complaints on WinAntiRansomWare or the other two (2) as well not here on Avast! Forums.  I hold membership in both and have worked with them in setting up some of their software.  My issue here is with Avast! blocking their download site even when using the "Exclusion" feature of their software.  I am not a programmer nor any sort of skipkiddy, hacker, or any other cute named trouble maker on computers, just a simple user with Analyst ability.

Edited by ME:

"Eddy,"

Excuse me please?  I had not gone to that link of VirusTotal until after posting the above, still wonder why the "Exclusion" feature is not performing.
Title: Re: What criteria used to block a website?
Post by: Milos on July 25, 2016, 12:43:42 PM
Hello LexCi,
1) Where did you try to download it from (what are the exact URLs)?
2) What was the detection shown by Avast (screenshot should help)?
3) What exactly did you put to the exclusions? Where did you put the exclusions to?

Milos
Title: Re: What criteria used to block a website?
Post by: Gopher John on July 25, 2016, 04:04:46 PM
@LexCi, I am able to download their executables without resorting to Avast exclusions.

FWIW, WinAntiRansom v 2016.7.505 is now available at https://www.winpatrol.com/mydownloads/ (https://www.winpatrol.com/mydownloads/).
Title: Re: What criteria used to block a website?
Post by: REDACTED on July 28, 2016, 03:52:57 AM
Hello Milos,

#1. The download is from their site: https://www.winpatrol.com/mydownloads/ (https://www.winpatrol.com/mydownloads/)
#2. There was NOT any detection popups from AVAST!  No screen shots were taken.
#3. Avast! Settings/General/Exclusions/Urls (as shown above) PLUS the downloaded file's location on my system for EXECUTION of the install.

Also needed to turn "OFF" Active Protection for File System Shield AND Web Shield before the download would be allowed and the INSTALL could be conducted.

Just finished the latest update, v2016.7.505, with all of the above done the 'service' would not install properly until Avast! was completely DISABLED "PERMANENTLY" for the duration of the install.  Needed to do the "OFF" and disable Permanently PLUS doing a reboot several times, maybe four (4) or five (5) times before the install finally completed

I have been using AVAST! for since about 1995 or 6 with very little issues or problems on x32 systems.  2004 ween to x64 still with out any problems or issues until this struck.  I have been posting on you forum the FACT there has been two (2) firewalls, four (4) malware, three (3) antivirus scanners all running at the same time without any hassle except by some people on this forum even so far as threaten banning from posting here.  Threats mean nothing to me especially when speaking the TRUTH. I did the two (2) firewalls just for testing purposes and they worked just fine.  NO, my system was not slowed any.

Hope this covers what you wanted and then some


Hello LexCi,
1) Where did you try to download it from (what are the exact URLs)?
2) What was the detection shown by Avast (screenshot should help)?
3) What exactly did you put to the exclusions? Where did you put the exclusions to?

Milos
Title: Re: What criteria used to block a website?
Post by: Milos on July 28, 2016, 09:50:12 AM
Hello LexCi,
I tried it with latest avast and latest VPS without any problems. It looks to be some conflict with software you have installed, it's not detection or specific URL block. What other resident software is running on your computer (another AVs, firewalls ,...).

Thanks,
Milos
Title: Re: What criteria used to block a website?
Post by: Eddy on July 28, 2016, 09:59:44 AM
Quote
I have been posting on you forum the FACT there has been two (2) firewalls, four (4) malware, three (3) antivirus scanners all running at the same time without any hassle except by some people on this forum even so far as threaten banning from posting here.  Threats mean nothing to me especially when speaking the TRUTH. I did the two (2) firewalls just for testing purposes and they worked just fine.  NO, my system was not slowed any.
Yes, that does slow down your system and may lead to conflicts/problems.
You might not notice the slowdown, but it is there.
Each process/application is using system time.
Title: Re: What criteria used to block a website?
Post by: bob3160 on July 28, 2016, 02:26:44 PM
Quote
I have been posting on you forum the FACT there has been two (2) firewalls, four (4) malware, three (3) antivirus scanners all running at the same time without any hassle except by some people on this forum even so far as threaten banning from posting here.  Threats mean nothing to me especially when speaking the TRUTH. I did the two (2) firewalls just for testing purposes and they worked just fine.  NO, my system was not slowed any.
Yes, that does slow down your system and may lead to conflicts/problems.
You might not notice the slowdown, but it is there.
Each process/application is using system time.
That also probably explains the problem with downloading and installing WinPatrol.
One firewall, one resident AV.
Title: Re: What criteria used to block a website?
Post by: REDACTED on July 30, 2016, 10:52:27 PM
Milos,

NO thre is only one firewall, I did that only for testing purposes.  This has only shown in the last couple of weeks.  What I have on my system has worked extremely well for over fifteen (15) years.  Eddy pointed out there was an issue with some viral software detected by VirusTotal last week or so, I did a scan this morning and it is clear now.  Find it rather strange that only that one site has this issue and is OK when disabling Avast!  I guess my solution will be to say Good-Bye to Avast, it has served me well over the years, but; is the only one that is causing this issue.

Hello LexCi,
I tried it with latest avast and latest VPS without any problems. It looks to be some conflict with software you have installed, it's not detection or specific URL block. What other resident software is running on your computer (another AVs, firewalls ,...).

Thanks,
Milos