How can I disable Web Shield?

[REDACTED]

I am tired of this "Web shield". How can I really disable it? Don't tell me to just set it off, I already did it, but still works. I can't disable it!!!!



It's still working!!! I am browsing a risky site, and all the time I see the Avast pop up window "Threat secured", that doesn't allow me to do anything!!

Clearly the "off button" does not work. Is tehre a way tio uninstall the web shield?

[mchain]

You want to remove your real-time protection (WebShield) so you can visit a likely malicious site without interference?   



Please post the actual website like this here in your next post but change the http to hxxp to protect innocent users from harm.

Like so:  hxxp://nameofwebsite.com/org/gov etc., so we can investigate why you are getting continuous alert blocks/popups.

OR, you can use VirusTotal.com to scan your website and see for yourself (Use the URL button and don't change anything and scan).

[lukor]

Hi, can you post a screenshot of the "Threat secured" avast popup with WebShield disabled? Might be that some other shield is popping in.

Can you also, please, post the output of the following command:

sc query aswstm


(you need to type it into the command prompt window to see the result)

Thanks.

[REDACTED]

It's the Web shield, as I said. It's impossible to disable it :-(
I am about to uninstall it and try other antivirus.

C:\Users\Luis>sc query aswstm

SERVICE_NAME: aswstm
        TYPE               : 1  KERNEL_DRIVER
        STATE              : 4  RUNNING
                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
        WIN32_EXIT_CODE    : 0  (0x0)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0

[REDACTED]

You want to remove your real-time protection (WebShield) so you can visit a likely malicious site without interference?   

Yes, and if it is my decision to do so, I should be able to do it. I should be able to disable the Web Shield, bit it keeps running.

P.S. I really hate this "verification system", entering some hidden letters to be able to post. Clearly Avast does not care about us users with dyschromatopsia (color blind). It's so hard to see the letters! I have to reload them over and over again, until I am able to see them.

[Asyn]

P.S. I really hate this "verification system", entering some hidden letters to be able to post.

Captcha is only needed for your first 3 posts. (Spam protection)

[mchain]

You want to remove your real-time protection (WebShield) so you can visit a likely malicious site without interference?   

Yes, and if it is my decision to do so, I should be able to do it. I should be able to disable the Web Shield, bit it keeps running.  [Bolding mine]
P.S. I really hate this "verification system", entering some hidden letters to be able to post. Clearly Avast does not care about us users with dyschromatopsia (color blind). It's so hard to see the letters! I have to reload them over and over again, until I am able to see them.

True.

If you wanted to know why avast is blocking you from visiting see below: 
https://www.virustotal.com/#/url/6ea3d07f889c6539f3d6a4b8ce00aa6e42768dad9649b7f578d855ef7e02ee10/detection
https://sitecheck.sucuri.net/results/www.mejorenvo.net/
http://urlquery.net/report/25616ef0-1853-45c8-922f-55027ff8c6d3
https://zulu.zscaler.com/submission/8412917e-932d-420d-8903-d8b1410946cb
https://quttera.com/detailed_report/www.mejorenvo.net
Site was visited by the above website scanners.  I did not visit the site you are trying to visit directly or indirectly.  Don't need to.

Correct.  Your system and your choice whether to visit or not.

[REDACTED]

I know there is some malware running on that website. If I leave a page opened on that site it will start loading my system at the point sometimes of crashing it. But it will not "infect" my computer permanently, just run code on my browser while I am there.  So, I can go and get some links there, and leave. But Avast does nto allow me anymore.

So, I still don't know "why Avast is blocking my access to that website". I have disabled Web Shield, but it is still running. It should be my option, it's my system.

It's the same with browsers. I have a security camera that listens on port 587. Now, "that port is restricted". I can't enter the camera to reconfigure it.  I found a procedure to unblock ports in firefox, and oh, surprise. It does not work. Keeps blocking it. It's my system, my risk, I should be the one who decides which place I want to visit or not, and not those stupid programs.

[bob3160]

I know there is some malware running on that website. If I leave a page opened on that site it will start loading my system at the point sometimes of crashing it. But it will not "infect" my computer permanently, just run code on my browser while I am there.  So, I can go and get some links there, and leave. But Avast does nto allow me anymore.

So, I still don't know "why Avast is blocking my access to that website". I have disabled Web Shield, but it is still running. It should be my option, it's my system.

It's the same with browsers. I have a security camera that listens on port 587. Now, "that port is restricted". I can't enter the camera to reconfigure it.  I found a procedure to unblock ports in firefox, and oh, surprise. It does not work. Keeps blocking it. It's my system, my risk, I should be the one who decides which place I want to visit or not, and not those stupid programs.

Why install any protection if you intend not to use it. Simply remove your protection and have fun infecting your system.
After all, it's only your security that's at stake. Have fun.

[mchain]

Seems PEBKAC is the issue here.  Your security camera may be hacked as well. 

What with literally hundreds of millions of websites to visit this is the only one that matters.   

[REDACTED]

Why install any protection if you intend not to use it. Simply remove your protection and have fun infecting your system.
After all, it's only your security that's at stake. Have fun.

I did not install "any protection". I installed an antivirus, to protect my  computer from viruses. I don't want a "Web shield which " to "protect me from browsing", as I also did not want the "Mail shield".
I just want the "File Shield". I am very careful about what I install in my system, so I have never been infected, even without using antivirus for years.

Now, if you don't know the answer to my question, why do you waste my time writing your comments? Can't you keep them for yourself?

[REDACTED]

Seems PEBKAC is the issue here.  Your security camera may be hacked as well. 

What with literally hundreds of millions of websites to visit this is the only one that matters.   

I am an Electronics Engineer, specialized is software and digital systems, working  developing software in the TELCO industry for over 20 years, but using real operating systems, like Linux. There is no PEBKAC here.
If I use windows at home (in my notebook I use only Fedora) it's just because of Steam games that run only in Windows.

My security camera is in my private LAN, with private address, protected by firewalls of two routers from internet and at no risk.

I posted you the screenshots where can be seen that Web Shield is "disabled", but still blocking access with "Threat secured".

if you as an "Avast Evangelist Ultra Poster* have no idea about why Avast is not disabling the Web Shield, you should be ashamed of your own ignorance, instead of accusing others of not knowing what they are doing.

[lukor]

Hi Rodrigo,

thanks for the screenshots and tests. Indeed, WebShield can be easily disabled/stopped and based on the original screenshot you have done it correctly. Its underlining driver is aswstm.sys, it is shared with SecureDNS/Real-site components, but if these two are off/disabled (or with Avast Free where Real-site is not offered) the driver normally stops and the test: "sc query aswstm" shows it as stopped.

That is a really interesting error, not sure why it does not turn off for you. We need to investigate. WebShield is hosting inside itself a bunch of other protection modules, namely script shield - a script blocking code that is loaded into the browser. Which browser do you use for this experiment? This particular detection is blocked by the former Script Shield, now part of WebShield. You can control which browsers are protected here in the settings under WebShield/Script scanning. See screenshot.

Anyway, if you don't like this type of protection, webshield and mailshield (any many other components) can be removed during installation (custom install) or directly from control panel, modify - you can select which shields and components should be installed and which not.

In the meantime, we'll try to find out why WebShield does not stop for you. Would you mind sending me the compressed the log folder? ("C:\ProgramData\AVAST Software\Avast\log" )

Thanks.
Lukas

 

[REDACTED]

Hi, Lukas,

I followed your instructions, disabling all browsers (I have been using Firefox in my tests), with no luck,. Then I tried disabling different things in the Scripts parts, and no luck, Web Shield continued always blocking the page. I succeeded uninstalling the components, from the control panel, as you can see on the attached screenshot. Now I finally don't have Web Shield active.

I am also attaching the logs, in case you still want to investigate further.

Thanks a lot for your help,

Luis

P.S. No, I could not attach logs, because of the 1MB file limit. I uploaded to google drive here :

https://drive.google.com/open?id=1T-AmF50ykc_cl94wQUtuSGNQb4rZXZW7

[kwiq]

Hi Rodrigo321,
it is a script shield detection and if you see it on every page it means your browser might be compromised and used for mining crypto currency !
Today we released script shield update which should reflect on/off checkboxes in advance webshield settings.

I wouldnt recommend to uninstall whole web shield component as most threats comes from net !

If you would like to visit pages which uses mining wait for next vps update and then try disable script shield. It should work now.

Thank you for report  !