Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: gameboyz on September 11, 2009, 06:29:55 AM

Title: Downloading of Infected Files
Post by: gameboyz on September 11, 2009, 06:29:55 AM
So as you know if you try to download one of Eicar's 4 "infected files" Avast has this pop-up box with a button "Abort Connection". So here's the thing. Say I want to download a file I know is clean, is there any way to bypass that pop-up without pausing any providers?
Title: Re: Downloading of Infected Files
Post by: Yanto.Chiang on September 11, 2009, 08:52:46 AM
Dear Gameboyz,

If one of webpage that you visited indicate as dangerous web page, then avast will blocked it automatically.
Unless you feel that web page is harmless, then you can make exclusions for avast to scan it with :

Web Shield - Click Customize - choose Exceptions Tab - Then you can fill the website that you trust to access.

Regards,
Yanto Chiang
Title: Re: Downloading of Infected Files
Post by: gameboyz on September 11, 2009, 11:30:51 AM
In that case may I suggest to the developers to include a Continue and Abort button? That makes things much simpler without the need for pausing providers or adding as an exception.
Title: Re: Downloading of Infected Files
Post by: Milos on September 11, 2009, 02:03:27 PM
In that case may I suggest to the developers to include a Continue and Abort button? That makes things much simpler without the need for pausing providers or adding as an exception.
Yes, it will be easier, but there is very big possibility, that most of users will use this button and get infected, because they don't know what it will cause.
Title: Re: Downloading of Infected Files
Post by: Lisandro on September 11, 2009, 02:05:19 PM
Please, no Continue button... ordinary people will just get infected...
Title: Re: Downloading of Infected Files
Post by: Milos on September 11, 2009, 02:09:08 PM
Please, no Continue button... ordinary people will just get infected...
Thanks for support.
Title: Re: Downloading of Infected Files
Post by: spg SCOTT on September 11, 2009, 04:57:14 PM
Please, no Continue button... ordinary people will just get infected...

Having a continue button would pretty much make the webshield pointless...as said, most people would click continue, and then avast! would be blamed for not protecting them ::)
Title: Re: Downloading of Infected Files
Post by: gameboyz on September 12, 2009, 07:27:23 AM
But by not having a Continue button it's like locking somebody up so they won't get exposed to the dangers of the world outside.

It's like not giving the user a choice. How about Abort (Recommended) and Continue (At your own risk!) buttons? With the Abort as the default selection so hitting Enter will select Abort?
Title: Re: Downloading of Infected Files
Post by: Marc57 on September 12, 2009, 07:35:33 AM
Please, no Continue button... ordinary people will just get infected...

I agree.
Title: Re: Downloading of Infected Files
Post by: YoKenny on September 12, 2009, 07:44:19 AM
Unfortunatly there are stupid people on the Internet and letting them have a Continue option would:
a) confuse them
b) let them continue to infect their system and then blame the anti virus application for not protecting them
c) hate people that know more than them so continue just to prove them wrong
d) need a scapegoat to blame when things go wrong
e) get rid of police as they are un-necessary and cost a lot of money
f) I get to say Na Nya.  I told you so.  If you did that you'l break something
Title: Re: Downloading of Infected Files
Post by: SpeedyPC on September 12, 2009, 08:53:47 AM
Please, no Continue button... ordinary people will just get infected...

I agree.

Me to I strongly agree no continue button bad idea, it not good for ordinary people and it not very good for Avast ;).
Title: Re: Downloading of Infected Files
Post by: gameboyz on September 12, 2009, 01:59:21 PM
Alright, I guess I'll continue pausing the providers to bypass this. And yeah, you guys are probably right. It is bad enough that dumb people can't read and will choose to Continue, it is worse that Avast will get blamed.  ;D
Title: Re: Downloading of Infected Files
Post by: Lisandro on September 12, 2009, 02:17:04 PM
Why do you need to pause the providers?
Title: Re: Downloading of Infected Files
Post by: SpeedyPC on September 12, 2009, 02:29:34 PM
Why do you need to pause the providers?

I think gameboyz mean just click onto abort connection. ??? ??? when web shield pop-up a virus message.
Title: Re: Downloading of Infected Files
Post by: Lisandro on September 12, 2009, 02:35:37 PM
Alright, I guess I'll continue pausing the providers to bypass this.
Bypass what?
Title: Re: Downloading of Infected Files
Post by: DavidR on September 12, 2009, 03:36:48 PM
But by not having a Continue button it's like locking somebody up so they won't get exposed to the dangers of the world outside.

It's like not giving the user a choice. How about Abort (Recommended) and Continue (At your own risk!) buttons? With the Abort as the default selection so hitting Enter will select Abort?

I too am totally against any Continue button, as for your average or inexperienced user the possibility of accidental or unknowingly clicking continue could expose them to a serious infection.

For an experienced use, there is nothing to stop then pausing the web shield (not all providers) to let it be downloaded, that isn't too onerous. As you said in your later post Alwil have to look after the less experienced user to effectively protect them from themselves.
Title: Re: Downloading of Infected Files
Post by: gameboyz on September 12, 2009, 03:44:08 PM
Why do you need to pause the providers?
So I can download a file which I know is clean but Avast thinks is infected.
Title: Re: Downloading of Infected Files
Post by: gameboyz on September 12, 2009, 03:44:49 PM
Alright, I guess I'll continue pausing the providers to bypass this.
Bypass what?
Bypass the pop-up with only the "Abort connection" option.
Title: Re: Downloading of Infected Files
Post by: DavidR on September 12, 2009, 03:49:57 PM
Why do you need to pause the providers?
So I can download a file which I know is clean but Avast thinks is infected.

You should also submit it to avast if you believe it to be clean (and have confirmed that, using virustotal, etc.)

There is a link on the alert window to Report as a false positive, see image.

Or send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic might help and false positive/undetected malware in the subject.
 
Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn't already in the chest) where it can do no harm and send it from there. A copy of the file/s will remain in the original location, so you will need to take further action and can remove/rename that.
 
Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.

That way it helps all avast users and resolves any FP.
Title: Re: Downloading of Infected Files
Post by: smage on September 12, 2009, 04:43:18 PM
Hi,

Do not add a continue button, average users will simply ignore the alert of the web shield and get infected.

Thanks
Title: Re: Downloading of Infected Files
Post by: Lisandro on September 12, 2009, 07:22:09 PM
gameboyz, I understand now.
You can disable WebShield only and, to be sure, scan the downloaded file (if possible, due to size limitation) in VirusTotal.
Title: Re: Downloading of Infected Files
Post by: gameboyz on September 13, 2009, 02:30:37 AM
gameboyz, I understand now.
You can disable WebShield only and, to be sure, scan the downloaded file (if possible, due to size limitation) in VirusTotal.
Should I use VirusTotal or Jotti?
Title: Re: Downloading of Infected Files
Post by: gameboyz on September 13, 2009, 02:34:44 AM
Why do you need to pause the providers?
So I can download a file which I know is clean but Avast thinks is infected.

You should also submit it to avast if you believe it to be clean (and have confirmed that, using virustotal, etc.)

There is a link on the alert window to Report as a false positive, see image.

Or send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic might help and false positive/undetected malware in the subject.
 
Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn't already in the chest) where it can do no harm and send it from there. A copy of the file/s will remain in the original location, so you will need to take further action and can remove/rename that.
 
Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.

That way it helps all avast users and resolves any FP.
Are you saying that to add a file to the User Files it has to be already in the chest. But if it's already moved to the chest there won't be a copy of the file remaining in the original location, right? Not too sure, haha.
Title: Re: Downloading of Infected Files
Post by: DavidR on September 13, 2009, 02:57:31 AM
You missed the important bit in brackets, "if it isn't already in the chest" in which case there is no need to add it the User Files and there won't be another copy in the original location. If it isn't in the chest (Infected Files) when you manually add the file to the User Files section it is just copying the file to the chest, so the original remains where it was.

Quote from: DavidR
add the file to the User Files (File, Add) section of the avast chest (if it isn't already in the chest)
Title: Re: Downloading of Infected Files
Post by: Gopher John on September 13, 2009, 03:09:59 PM
gameboyz, I understand now.
You can disable WebShield only and, to be sure, scan the downloaded file (if possible, due to size limitation) in VirusTotal.
Should I use VirusTotal or Jotti?

Just uploaded a small file to both.  VirusTotal used 41 programs, while Jotti used 21.