Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: naren17 on September 08, 2010, 03:30:54 PM

Title: www.antispyware.com
Post by: naren17 on September 08, 2010, 03:30:54 PM
Avast Network Shield use to block www.antispyware.com. The site is not blocked by the latest version .677. Why??

Thanxx
Naren
Title: Re: www.antispyware.com
Post by: Hermite15 on September 08, 2010, 04:07:55 PM
site "looks" clean at first sight, but download doesn't look clean at all ;D
http://www.virustotal.com/file-scan/report.html?id=c5975601eef19c2445d2a31c55e7faa65f24b71b1395683f138790e304392c97-1283954612

>>> site should definitely be blocked again (as expected when having a quick look at the page, that's a rogue, not detected by Avast btw )
Title: Re: www.antispyware.com
Post by: DavidR on September 08, 2010, 04:25:35 PM
Agreed, whilst WOT isn't to be taken as gospel and can be poor at times it is very emphatic in this case, http://www.mywot.com/en/scorecard/antispyware.com (http://www.mywot.com/en/scorecard/antispyware.com) and also http://www.urlvoid.com/scan/antispyware.com (http://www.urlvoid.com/scan/antispyware.com).

Title: Re: www.antispyware.com
Post by: naren17 on September 08, 2010, 04:30:26 PM
site "looks" clean at first sight, but download doesn't look clean at all ;D
http://www.virustotal.com/file-scan/report.html?id=c5975601eef19c2445d2a31c55e7faa65f24b71b1395683f138790e304392c97-1283954612

>>> site should definitely be blocked again (as expected when having a quick look at the page, that's a rogue, not detected by Avast btw )

Yes the site should be blocked again. Every Avast version always blocked this site. I thought Network Shield here is not working. So this .677 version is not blocking this site, right??

Thanxx
Naren
Title: Re: www.antispyware.com
Post by: Hermite15 on September 08, 2010, 04:39:12 PM
677 doesn't block ;)
Title: Re: www.antispyware.com
Post by: DavidR on September 08, 2010, 04:49:12 PM
It has nothing to do with the avast version the network shields malicious sites list is updated during the virus definitions and engine updates.

I have reported it for further analysis.
Title: Re: www.antispyware.com
Post by: naren17 on September 08, 2010, 04:51:14 PM
Thanxx for the info.

Regards
Naren
Title: Re: www.antispyware.com
Post by: DavidR on September 08, 2010, 04:55:10 PM
You're welcome.
Title: Re: www.antispyware.com
Post by: Hermite15 on September 08, 2010, 05:03:01 PM
It has nothing to do with the avast version the network shields malicious sites list is updated during the virus definitions and engine updates.

I have reported it for further analysis.

oh thanks for the tip ::)... but the OP just asked if the network shield in 677 detected anything,and the answer remains no. (whatever the network shield depends on... not mentioning that the module itself could fail, and this belong to the build)

edit: but okay, engine and database are mainly responsible, but I think I knew that :)
Title: Re: www.antispyware.com
Post by: DavidR on September 08, 2010, 05:10:35 PM
Well yes and no, it depends on how you read the question.

Quote from: naren17
So this .677 version is not blocking this site, right??

To me that reads, naren17 asks if the failed blocking is specifically a problem in 5.0.677 and that is why I gave that response.
Title: Re: www.antispyware.com
Post by: naren17 on September 09, 2010, 01:27:51 PM
Well yes and no, it depends on how you read the question.

Quote from: naren17
So this .677 version is not blocking this site, right??

To me that reads, naren17 asks if the failed blocking is specifically a problem in 5.0.677 and that is why I gave that response.

Yes I meant this.

Naren
Title: Re: www.antispyware.com
Post by: Hermite15 on September 09, 2010, 01:43:21 PM
good ;D
Title: Re: www.antispyware.com
Post by: Sparxx on September 09, 2010, 03:07:12 PM
Actually the site and the downloaded application are clean, but after install, when the program runs, it's process "Anti-Spyware.exe" is blocked by Avast's network shield because the process is trying to connect to a harmful site, see screenshot above:
Title: Re: www.antispyware.com
Post by: Hermite15 on September 09, 2010, 03:10:30 PM
@ Sparxx : okay I of course didn't risk what you tried, but that's good to learn, thanks ;)
Title: Re: www.antispyware.com
Post by: Sparxx on September 09, 2010, 03:12:08 PM
No worry, it's a safe virtual environment :) .
Cheers.
Title: Re: www.antispyware.com
Post by: YoKenny on September 09, 2010, 03:41:26 PM
@ naren17

The hpHosts and MVPS HOSTS file blocks antispyware.com:
http://hosts-file.net/?s=antispyware.com&x=27&y=9

43 Additional match(es) found for the specified hostname:
http://hosts-file.net/?s=antispyware.com&view=matches