Author Topic: Web Shield, probably a false positive  (Read 3371 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Web Shield, probably a false positive
« on: January 14, 2015, 10:17:19 AM »
When I go to this page:
http://lfg2000.deviantart.com/
I get a pop up message from the web shield about infection blocked.

Details:

    URL
    hxxp://www.cartomotive.com/wp-content/uploads/2010/06/2011-Range-Rover-Autobiography-Black-Tailgate-Badge-View-670x502.jpg

    Infection
    URL:Mal

In general till now deviantart for me has been proved totally safe and I don't see how the url blocked is connected with the original url.
The problem appears either by entering directly the address or by following a link from another deviantart page.

I have no other problems on the pc or any other virus warning messages. Scan finds no virus.

Windows XP SP2, but with all the security fixes of SP3.
Firefox 33.1.1
Avast Free 2014.9.0.2021
« Last Edit: January 14, 2015, 10:18:59 AM by lukthemighty »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Web Shield, probably a false positive
« Reply #2 on: January 14, 2015, 12:01:25 PM »
I notice a couple of things

1]
You are using a old version of FireFox

2]
You are using a old version of avast

3]
You can't have XP SP2 with all security fixes of SP3
Some need SP3 to be installed before you can install the security updates.

I strongly suggest you first make everything up-to-date.

Also, avast is right as I see it.
It looks like it is not a image at all.

Website gives a 403 on ZuluScaler (access forbidden)

http://urlquery.net/report.php?id=1421234588479
http://urlquery.net/report.php?id=1421234617013
« Last Edit: January 14, 2015, 12:24:20 PM by Eddy »

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: Web Shield, probably a false positive
« Reply #3 on: January 14, 2015, 01:14:14 PM »
Hi,
Avast warns you about using resources from cartomotive.com, which was blocked by Avast over 2 years ago. Seeing the domain does not exist now (or is parked), I unblocked it just for the sake of not alerting you when you visit deviantart.com.
Honza

REDACTED

  • Guest
Re: Web Shield, probably a false positive
« Reply #4 on: January 14, 2015, 10:56:54 PM »
I notice a couple of things

1]
You are using a old version of FireFox

2]
You are using a old version of avast

3]
You can't have XP SP2 with all security fixes of SP3
Some need SP3 to be installed before you can install the security updates.

I strongly suggest you first make everything up-to-date.

Also, avast is right as I see it.
It looks like it is not a image at all.

Website gives a 403 on ZuluScaler (access forbidden)

http://urlquery.net/report.php?id=1421234588479
http://urlquery.net/report.php?id=1421234617013

You are right, I typed it wrong, I have all updates till SP3.
I wasn't sure it's a false positive, I came here to ask and find out.

As for your other notices, I only have to tell that you live in your world giving ideas/solutions, that cannot be really applied.
Sorry for telling this, but your message is too strict, like a military order!

A PC of 2003 cannot run XP SP3 easily, it's too slow! Especially this Net.framework is a killer!
Without sp3 plus again that my pc it's old, it's a risk to go to a newer version of avast, for the stability of my PC. I moved to this version after 3.5 years. It took about a month to realize benefits, but also flaws of this version till finally uninstall it and reinstall it with the desired settings.
And even if it's not like this, will you send me the money for a stable and fast internet connection???
Because what you suggest it's gonna take forever to do it from home!!! And if The new avast version has some flaw I will have to repeat or search for and...it's like torture!!!

And because in a way it's connected, grabbing the chance, I would like to suggest to whoever he listens that except that support for windows xp must not be stopped, it's also important not to be stopped the distribution of offline installers, not only to help many people, but also to avoid the virus mess it's going to be created all over the web.
There are many people like me that need this and maybe they don't know too much about registry, settings, ... but know some basic things like format and building a clone. It's faster and easier to restore a clone than trying to fix. If time comes and I will have no easy access to software I will simply stop caring at all about updating and viruses and if I get infected till I realize it I will probably have infect many others also. What when I realize it? I'll restore my clone.

Sorry, but this is my reality!
There are no money!!!
And even when there were some I should plan and save and within a year I would buy a new PC and try a fast connection on home.
When money existed in Greece I was not the one who was keeping it.
In our days the world is a small neighborhood, anything far affects everything everywhere even more in the web.
Don't forget it and give orders to people like nothing is happening. 23% of the pcs in the world still running windows xp and believe me in poor countries it's more, with many pcs not recorded/registered and many of them do not have direct fast access to the web and when it comes to update they do it with offline installers they download from netcafes or from friends.

If we suppose that I'm a sick man and you are the doctor is like answering to me: "Sorry I can't help you, you are too poor!"

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Web Shield, probably a false positive
« Reply #5 on: January 15, 2015, 12:46:31 AM »
Quote
A PC of 2003 cannot run XP SP3 easily
It sure can hand XP SP3 without a problem. Running it on a 2004 system here myself.
Quote
Especially this Net.framework is a killer!
No it is not. It isn't even noticeable if it runs or not.
Quote
And even if it's not like this, will you send me the money for a stable and fast internet connection???
Download the new(er) applications, updates etc in a library, at a friends place or where ever there is fast(er) internet. Put them on a usb stick/cd/dvd and install them on your system.
Quote
Don't forget it and give orders to people like nothing is happening. 23% of the pcs in the world still running windows xp
No, it is 5% - 12% and dropping.
http://www.w3schools.com/browsers/browsers_os.asp
http://gs.statcounter.com/#os-ww-monthly-201312-201412
Quote
it's also important not to be stopped the distribution of offline installers
Since the download through a "online installer" is stored locally before it runs, you (almost) always can use that for a offline install.
Quote
If we suppose that I'm a sick man and you are the doctor is like answering to me: "Sorry I can't help you, you are too poor!"
As they say: Best things in life are free!
Quote
I realize it I will probably have infect many others also. What when I realize it? I'll restore my clone.
And (almost) immediately get a infection system again because the lack of decent protection.

REDACTED

  • Guest
Re: Web Shield, probably a false positive
« Reply #6 on: January 16, 2015, 09:02:09 AM »
Do you like reading? Because I like writing!

When sp3 was released half of the pcs it was installed became too slow. I speak of course of a sample of about ten pcs, I had the chance to use.
Pentium 4 2.8 or 2.6 Hyper Threading
512 or 1024 mb ram
I can't tell why and to what it's connected, I know some things, but it's more I don't know and after all the word "speed" on a pc it's weird.
I learn more of problems appearing and I understand it has to do a lot with settings of software and what starts on the beginning (msconfig), But I couldn't do experiments to people PCs, I'm not a technician. I just checked a little and ask them.

I actually do the last years what you're saying, go somewhere, download and bring stuff to home, but I can't do it all the time and it's a process I avoid because if something doesn't work right I fall into a "loop" I must search on the web...and if I don't find solution wait till I can go again somewhere to download...it's a torture loop. And I can't go to a friend suddenly every time I have a little problem like this.
And all these things require time, I WANT TO USE MY PC, NOT BE THE SLAVE OF MY PC.
It's so difficult to understand this? Try to live this way for two weeks. Sometimes a new version comes out just one day after I brought the "new" stuff home.

Obviously I can't doubt you about how many pcs are still running XP, I didn't know that worldwide has been dropped so much, but this doesn't change "my reality". Here 30% of PC are as hardware what I described above and running XP.

For the offline installer I hope you understand that I didn't "blame" you of this, right? It's just a similar problem and I mentioned it.
Stored locally you mean on local settings\temp? If not there, where? I don't know this. Are you sure all files needed are saved before you click the "install" button? I mean I can't go to another PC and install something they don't need. It would be useful to me if you could tell me how and where the files are saved, but you should know that inexperienced users are scared to touch hidden/system folders, it's not a general solution.

If you have a second pc available then live without antivirus for some time, WITH NO CRITICAL FINANCIAL OR PERSONAL DATA ON YOUR HARD DRIVE of course. If you don't click links of messages and do not visit porn/keygen/crack sites it will pass a long time till you be infected. And even if you get infected you just live with the virus, it's all in your mind about feeling "right". Viruses are not always slow down your PC or lead to BSOD. And if it slows it a little, you won't realize it, because without antivirus a PC can fly!!! I've lived like this for a long time. The only thing I had to check was the connections and the calling number of my active connection, to be sure  it wasn't a dialer, because I speak of the time of PSTN connection. I lived like this about five years 2004-2009. In this period I had more BSOD from new software/driver/update versions than from viruses. Actually only once a virus led me to BSOD, while about six-seven from software/driver/update and one hardware-memory failure.
[That period I had tried KANOTIX an enhanced multimedia version of KNOPPIX, and I liked it a lot, but soon I realized that going to a windows PC with fast inernet I couldn't download an installation package for any application, because I was getting lost into the dependencies and I was always missing something. I found no way to download automatically package and all its dependencies from a windows PC. As far as I know the situation remains the same, you can only save an installation package with the dependencies only from another linux machine with the same OS and version.]

* "WITH NO CRITICAL FINANCIAL OR PERSONAL DATA ON YOUR HARD DRIVE"
  I suppose you know these things are done only this way, but other people gonna read this too.

I heard they plan to ask taxes for the air!
Can human breathe something else or we should rapidly evolute to fishes?
Maybe that's why the earth has much more water than land.