Mail Shield blocking Coinbase emails

[frank.martinez]

I noticed that, recently, the Mail Shield feature started marking any email I receive from coinbase (no-reply@conbase.com) as "***VIRUS***" in my Outlook.  When I go to check the original email in the web interface of my mail provider, the email is safe.  It contains no links or attachments, and is most often just a notification that some transaction I did on Coinbase is completed. 

Why is Avast discriminating against harmless emails just because they come from Coinbase?  How can I whitelist no-reply@coinbase.com for myself on my own PC so that Avast will stop doing this?

[r@vast]

I noticed that, recently, the Mail Shield feature started marking any email I receive from coinbase (no-reply@conbase.com) as "***VIRUS***" in my Outlook.  When I go to check the original email in the web interface of my mail provider, the email is safe.  It contains no links or attachments, and is most often just a notification that some transaction I did on Coinbase is completed. 

Why is Avast discriminating against harmless emails just because they come from Coinbase?  How can I whitelist no-reply@coinbase.com for myself on my own PC so that Avast will stop doing this?

Hi,

Was the email address no-reply@conbase.com or no-reply@coinbase.com

[Nick387]

I'm having the same issue with legitimate emails from <no-reply@coinbase.com>.  When I try to restore the email from quarantine and whitelist I'm told that the message cannot be restored?

[r@vast]

Hi,

Can you please report it here: https://www.avast.com/false-positive-file-form.php

[brwntree]

Hi me too - But in my case recently the AOL server seemed to cause my client (Thunderbird) to re-download all emails.  When this happened, emails that were previously fine and considered safe by AVAST earlier, were now being quarantined with no way to recover and marked as ***VIRUS in the subject field due to HTML:Url-inf[Susp] which supposedly means the email contains a URL link to a site on the AVAST block list.  But I want to recover these emails and so turn off mail shield and set AVAST to no longer automatically move to quarantine but to ask (since all these emails are indeed false positives).  I then turn mail shield back on and go to Thunderbird folder and request a repair which it does but lo and behold there's AVAST NOT asking first what to do (I was hoping I could at least tell it to do nothing) but auto-quarantining these emails again.  So I turn mail shield off again and had already sent last week a sample false positive email to Avast and there are plenty of complaints on this forum of very similar behavior (am on the threads for HTML:Url-inf[Susp] as well as not being able to restore) and no resolution or help.  This is getting to the point of intolerable - AVAST is good but these unrecoverable false positive emails are intolerable.

[DavidR]

Unfortunately the settings in the mail Shield don't cover this.  I personally never allow autonomous action (regardless of program) this used to be simple as it was in the mail shield settings. 

Now this option it is bloody hidden (buried) in the undocumented geek:area, hidden in the bloody Avast UI > Menu > Settings now type this 'geek:area' in the Search field without the quotes. When in the geek:area type mail shield, now you should have this screen (see attached image) displayed, I have arrowed what I have on mine, so any decision on actions is mine. 

But I can't blame anyone if I get it wrong, so you do have to pay attention to what the alert says as simply and take care as opening it could put you at risk.

Without doubt the geek:area is a huge pain in the ass of any of the UI changes, and the sooner it is reversed the bloody better.

[brwntree]

yes & thanks so much for the info on geek:area - when i looked at my client it had the first two set to ask but for susp items it was auto - i promptly set this to ask.  Tried again and indeed it was asking but the only options were keep blocking or download.  Selected download and it did nothing.  Since there was no option for do nothing but there was in the geek:area, i went back and set it from ask to do nothing.  This just caused it to auto-quarantine again.  So AVAST in uncooperative in many respects as it pertains to this issue and problem.  Needless to say had to go back to disable the mail shield.   That's it for now.

[DavidR]

You're welcome, but you have to consider they are in the business of protecting many hundreds of millions of users who might not be as experienced as you.

[brwntree]

lol, yes & thanks again.  When said, "So AVAST is uncooperative...", I was mostly referring to the software seemingly not honoring the settings that were set to it or performing an effect opposite to what the setting would do or expected to do.  Anyway, still waiting on Avast corp for a false-pos fix or update or something b4 deciding to scrap the software entirely. 

[brwntree]

Hi - Just an update - after sending a sample email in question from quarantine, Avast generously got back to say, "Our virus specialists have been working on this problem and it has been resolved. Detection should not be appearing anymore."