Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: drhayden1 on April 08, 2006, 03:55:35 AM

Title: web and network shield
Post by: drhayden1 on April 08, 2006, 03:55:35 AM
 how can i tell if my web and network shields are working correctly......i have detailed checked on web shield and i never see anything(what does it do?)and the network shield...........i never see any item where it says last scanned..........standard shield ......have that detailed checked and no problem..........but leave the detailed unchecked....gets annoying........ :o 8)
Title: Re: web and network shield
Post by: drhayden1 on April 08, 2006, 04:06:03 AM
i was just looking at the run time of each of the 7 providers and each were on the same run time(1:13:00)
except web mail which is @21:00 at present.........and all the sensitivity in all the providers are set to high.......is this o.k.?????
Title: Re: web and network shield
Post by: Jarmo P on April 08, 2006, 12:11:16 PM
You would not normally see an alert from network shield.
If you do, it is most likely a not working firewall/exposing yourself to net otherwise when not needed.

So be happy ;)

EDIT
If you dont see any scanned message from web shield provider status screen, then it is not working for you.
With XP and i think win2000 systems it is automatic, for win 9x including Me you have to make it yourself:
http://www.avast.com/eng/webshield_issues.html

Best wishes, Jarmo
Title: Re: web and network shield
Post by: FreewheelinFrank on April 08, 2006, 12:44:26 PM
Go here to test webshield:

http://www.eicar.org/anti_virus_test_file.htm

Go to the bottom of the page and click on eicar.com.

Sensitivity is probably best left to medium; having it on high may slow your computer down, but it's up to you to decide.
Title: Re: web and network shield
Post by: Jarmo P on April 08, 2006, 12:51:37 PM
As Frank told you can and should go to that web page and test your antivirus.
With webshield working, you should get an abort connection alert.
If you get some other alert from standard shield, then webshield is not working for you.
Title: Re: web and network shield
Post by: emy80 on April 08, 2006, 01:08:46 PM
Go here to test webshield:

http://www.eicar.org/anti_virus_test_file.htm

Go to the bottom of the page and click on eicar.com.

Sensitivity is probably best left to medium; having it on high may slow your computer down, but it's up to you to decide.

Hello! I did the test. i went to the site and tried downloading the file eicar.com of 68 bites. Avast opened a window telling me that the file was infected. So far so good. I got a little window in the lower right corner telling me that the file was infected byt eicar not a virus.
The windows Avast poppe out had a button saying abort connection. I clicked on it expecting the virus warning to go away. it did but then the Windows donload window appeared. the one saying, save file or cancel. If made a mistake and selected save file I would get infected! Why! I expected Avst to simply delete the download. not to say "hey that's infected" and then keeping the option save file open is it risky? If I rightclick the Avst icon on the Tray bar I can see that Web Shield found the infected file and the URL of the page. But i could have still downloaded it.  :'( Is there something wrong in my Avast Setting. Everything is set to hight.
Title: Re: web and network shield
Post by: Jarmo P on April 08, 2006, 01:17:57 PM
I guess there is something wrong in your avast setup if after webshield warning you were still given the option to save the file in your computer.
But as you go and try to work out what is wrong, that file you downloaded is harmless, only an agreed test file signature there.

EDIT:
Eicar was made for all antivirus companies as an universal test antivirus signature containing file. The link Frank gave is safe.
Not maybe something you find googling as an answer.
Sure first found links are safe, but better beware everything ;)
So you readers use that link.
Title: Re: web and network shield
Post by: emy80 on April 08, 2006, 01:46:24 PM
I'd like to know if there is some setting I have to change. i left all the dafault ones. But I'm still kind of anxious. I know it was harmless. But what if something serious will be detect?  :'(

Nevermind I found this post:
http://forum.avast.com/index.php?topic=19178.0
i hope someone will be able to help. Thanks!
Title: Re: web and network shield
Post by: Jarmo P on April 08, 2006, 01:54:45 PM
emy, i think you will have to wait the answers from the other regular posters in this forum like Tech.
I ask you only this  ....  you dont have any other antivirus running/left uninstalled that might have caused this thing?

After aborting the connection to eicar site, still getting the chance to download it?
Some programs you have running?

Some conflict there seems to be with avast and other installed programs learning from your posts. Then again there are virus infected machines :(   Not suspecting yours is one, just a note that i think is far out in your case.
Title: Re: web and network shield
Post by: Lisandro on April 08, 2006, 02:01:44 PM
I'd like to know if there is some setting I have to change. i left all the dafault ones. But I'm still kind of anxious. I know it was harmless. But what if something serious will be detect?  :'(
Indeed strange that after the 'abort connection' the file is there but, maybe, the second window for download file was in a secure connection (HTTPS).
Two messages could not be related. I mean, WebShield detects and abort a page load. Other browser window, other connection, made another download, clean (maybe).
The best will be a full avast scanning (archives included).
If you can, you should schedule a boot time scanning with avast.
And, the last, I would recommend Ewido and A-squared as trojans/malware free detectors.
Title: Re: web and network shield
Post by: emy80 on April 08, 2006, 02:02:29 PM
emy, i think you will have to wait the answers from the other regular posters in this forum like Tech.
I ask you only this  ....  you dont have any other antivirus running/ledt uniinstalled that might have caused this thing?

After aborting the connection to eicar site, still getting the chance to download it?
Some programs you have running?

All the programs in my signature are running. So far nothing bad happened aside a little problem with ZA that's not related to Avast.
I reformatted the pc last friday so I had a clean install of Avst. No other AV running nor installed previously. I've used Avst for two month previously with ZA and all was ok. granted I never visited infected site. the fact that at least Avst Web Shield gives me a warning is ok. I can always abourt the connection manually. but this make me a bit anxious. I know the best antivirus out there is me, with my actions, being able to accept or abort something. but this is annoying. Well.....at least Web Shield got the warning.
Title: Re: web and network shield
Post by: emy80 on April 08, 2006, 02:08:23 PM
I'd like to know if there is some setting I have to change. i left all the dafault ones. But I'm still kind of anxious. I know it was harmless. But what if something serious will be detect?  :'(
Indeed strange that after the 'abort connection' the file is there but, maybe, the second window for download file was in a secure connection (HTTPS).
Two messages could not be related. I mean, WebShield detects and abort a page load. Other browser window, other connection, made another download, clean (maybe).
The best will be a full avast scanning (archives included).
If you can, you should schedule a boot time scanning with avast.
And, the last, I would recommend Ewido and A-squared as trojans/malware free detectors.

Hi tech! Thanks for the advices. I have Ewido running in real time protection. Since I just selected cancel I din't download the file. I used the normal http connection. What's confusing me is why, even if Avast saw the file coming it just said it's infected without taking precautions. I'm not particulary concerned over the eicar file and no eicar file was found in my system. I'll wait for the next Avast version and try the test again. Maybe that will work. As long as Web Shield gives me a warning I'm ok.
Title: Re: web and network shield
Post by: Jarmo P on April 08, 2006, 02:28:04 PM
emy, let us know if you find a solution ;)
It is really important to others reading this thread too.

until then i hush up as is my style, heh
Nice changing words with you.

Jarmo
Title: Re: web and network shield
Post by: emy80 on April 08, 2006, 02:32:18 PM
emy, let us know if you find a solution ;)
It is really important to others reading this thread too.

until then i hush up as is my style, heh
Nice changing words with you.

Jarmo

I've got screenshots. Still editing those. i'll post them in the other topic. So far I've tried blocking the site and for the Blocked URL option Avast web Shield is working great! I think it's something that even if not common, Avast tech need to look out for. It can bring people to not trust Avast anymore. I think that at least, if the Web shield detected it it's ok.
Title: Re: web and network shield
Post by: Jarmo P on April 08, 2006, 02:42:02 PM
Sometimes, I have thought so too.
That problem is with programs and many times it is.
Far too many times it has been though the human error I have myself maked.
But emy, if you found something new, we are all interested.
Heh, I dont trust avast 100 %, it is after all only a program.
Title: Re: web and network shield
Post by: emy80 on April 08, 2006, 02:57:17 PM
Sometimes, I have thought so too.
That problem is with programs and many times it is.
Far too many times it has been though the human error I have myself maked.
But emy, if you found something new, we are all interested.
Heh, I dont trust avast 100 %, it is after all only a program.

i'm not a tech nor I want my pc to get infected with something just trying to find a possible glitch with Avst web shield. I tried again since i know eicar is not a real virus. but I didn't find a solution. well...thanks anyway.
Title: Re: web and network shield
Post by: Lisandro on April 08, 2006, 03:05:09 PM
What's confusing me is why, even if Avast saw the file coming it just said it's infected without taking precautions.
It did take the precautions, it abort the connection of the browser...
That particular infected file/link was not activated.
If you do the test now, don't you get the abort window again?
Title: Re: web and network shield
Post by: emy80 on April 08, 2006, 03:07:40 PM
What's confusing me is why, even if Avast saw the file coming it just said it's infected without taking precautions.
It did take the precautions, it abort the connection of the browser...
That particular infected file/link was not activated.
If you do the test now, don't you get the abort window again?

Nope. Still the same. At least I can abort the connection manually.
Title: Re: web and network shield
Post by: drhayden1 on April 08, 2006, 05:16:24 PM
its working now......had to go to internet options and open port 12080.......both the standard and web shields are working now...........thanks out there in the avast world! ;D :D ;)
Title: Re: web and network shield
Post by: emy80 on April 08, 2006, 05:23:02 PM
its working now......had to go to internet options and open port 12080.......both the standard and web shields are working now...........thanks out there in the avast world! ;D :D ;)

just a question...did you do the test?
Title: Re: web and network shield
Post by: drhayden1 on April 08, 2006, 06:05:19 PM
no.... cause i did'nt like the part at the end saying about maybe not possible to delete files from your pc.....didn't feel to safe about that end? :'(
Title: Re: web and network shield
Post by: drhayden1 on April 08, 2006, 06:15:23 PM
one more question???or should i start a new topic???what is the p2p and outlook/exchange used for......is that for outlook express and incredimail or something different???(i use both)and if not used can i terminate the shields?............
Title: Re: web and network shield
Post by: emy80 on April 08, 2006, 06:20:16 PM
one more question???or should i start a new topic???what is the p2p and outlook/exchange used for......is that for outlook express and incredimail or something different???(i use both)and if not used can i terminate the shields?............

I think you can terminate the shield you feel you don't really need. if you don't use p2p software you can terminate that shield. I personally leave all of them active. Can be a bit heavy on the resources but I prefere that than risking.
I know how you felt. When I got the message Save or cancel in the donload I choosed cancel. i think Avast can very well detect that file in the HD and delete it. but better safe than sorry.
Title: Re: web and network shield
Post by: drhayden1 on April 08, 2006, 06:28:28 PM
thanks emy80.......i'll leave them on or active or whatever the word is for it..........one more thing......how does network shield work.....have never seen any last scanned but it's running//......do you have home or pro......i went pro after home for @2 years :P
Title: Re: web and network shield
Post by: emy80 on April 08, 2006, 06:48:14 PM
thanks emy80.......i'll leave them on or active or whatever the word is for it..........one more thing......how does network shield work.....have never seen any last scanned but it's running//......do you have home or pro......i went pro after home for @2 years :P

oh! I have home. So i don't see a network protection. And I have just a PC at home. I don't have a home network. Sorry.
I like Avast for all the option it has. I can't wait for the next version.
Title: Re: web and network shield
Post by: Lisandro on April 08, 2006, 07:29:27 PM
How does network shield work.....have never seen any last scanned but it's running//......do you have home or pro......i went pro after home for @2 years :P

Network Shield is a protection against known Internet worms/attacks. It analyses all network traffic and scans it for malicious contents. It can be also taken as a lightweight firewall (or more precisely, an IDS - Intrusion Detection System). Basically, it covers all Internet worms. Such as Win32.CodeRed, Win32.SQLSlammer, Win32.Blaster, in32.Welchia (Nachi) and Win32.Sasser.

So, if you're using a 3rd party firewall, you won't see activity of the Netshield as the firewall blocks the invasion before.
Title: Re: web and network shield
Post by: drhayden1 on April 08, 2006, 11:19:27 PM
tech............i'm using the security in my router......wep and spi firewall and have windows firewall off so they won't conflict................that's why my network shield is my working as you said............so there is not a problem................right?????!!!!!................thanks again avast world :( :(
Title: Re: web and network shield
Post by: timcan on April 08, 2006, 11:39:21 PM
tech............i'm using the security in my router......wep and spi firewall and have windows firewall off so they won't conflict................that's why my network shield is my working as you said............so there is not a problem................right?????!!!!!................thanks again avast world :( :(
Hello, no problems or conflicts with this setup.In fact you can turn the xp firewall back on with no conflict to the router. :)
Title: Re: web and network shield
Post by: Lisandro on April 09, 2006, 04:36:42 PM
so there is not a problem................right?????!!!!!
Yes, it's ok, there is not a problem  8)