Avast blocks legitimate connections.

[7758]

I have QQ messenger on my laptop and every time I log into it Avast always blocks something relating to the app. It says it is infected with URL blacklist
This is trying to update the app but is not being allowed. The I.P address is where the company headquarters is situated and that is being blocked.
It is not URL blacklist in any shape or form. I don't think Avast engineers have a clue as to what a blacklist is.

[bob3160]

I have QQ messenger on my laptop and every time I log into it Avast always blocks something relating to the app. It says it is infected with URL blacklist
This is trying to update the app but is not being allowed. The I.P address is where the company headquarters is situated and that is being blocked.
It is not URL blacklist in any shape or form. I don't think Avast engineers have a clue as to what a blacklist is.

Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php

[7758]

There is no file or website URL to select. The history section of Avast tells me it is an IP number. There is no way to report that to the site you gave me as it asks for a website URL and detection code.

[Lano]

Hello. Using URL mode, type in the IP.

Edit PS: Use URL blacklist as detection code.

[7758]

Nothing works. I cannot type in the URL or the IP as it says it is not valid.
It also says my email address is not valid yet it is the email address I use to log in to the site.
Why does Avast not have people who work for the company checking messages and queries on here instead of relying on volunteers?
And why can't they make the catpchas readable. 17 times I had to request another image.
The Ip is 120.232.27150

[DavidR]

Nothing works. I cannot type in the URL or the IP as it says it is not valid.
It also says my email address is not valid yet it is the email address I use to log in to the site.
Why does Avast not have people who work for the company checking messages and queries on here instead of relying on volunteers?
And why can't they make the catpchas readable. 17 times I had to request another image.
The Ip is 120.232.27150

The IP you have given is incorrect, there are four groups of up to 3 numbers in each group.

You have given only 3 groups and 5 numbers in the last group.

Why not attach a screenshot of the Avast Alert, with the details option selected.
Attaching Images to your post - When you Click the Reply button it opens a text window for you to post your comment (reply or post).
Click the Preview button, that shows what you have input and expands it to include 'Attachments and other options'. Click that it further expands, here you can attach images, etc. at the bottom of your post.
See my attached image, click to expand.

You will be pleased to now that have 3 posts, the captchas (anti-spam measure) have ended.

[7758]

I missed out the dot between 27 and 150. Apologies.
Still the IP is being blocked.

[DavidR]

If the Avast Alert happens again, attach a screenshot of the Avast Alert, with the details option selected. This gives more information than the History option.

The one history entry gives a website guce.golocal.guru, but that is on a different ip address 120.232.130.113.
See the check on that IP - https://www.abuseipdb.com/check/120.232.130.113 - but that appears to be China Mobile Communications Corporation, so may be the connection method/origin.
And also a check on the the domain - only one hit and phishing related - https://www.virustotal.com/gui/url/efb78053acfad748579f05b34695e04d96b28201a022f77df32172227eb3c1fc?nocache=1

The other IP 120.232.27.150 is also China Mobile Communications Corporation.

[7758]

China Mobile is my provider and is  what I use to connect to the internet and is what I use for my phone.

As for the phishing. The notice only comes when I connect QQ messenger and it wants to update to a newer version..

I do not get any alerts. Only the notifications when I check them.

[DavidR]

Have you got the Avast UI > Menu > Settings > Notifications > Pop up notifications set to set to 'Silent Mode' (because you should have seen them) as these are essentially the history of alerts.

Have you taken any action in reporting these as you now have both the IP address and the domain names in your images (as I mentioned).

[7758]

I use silent mode but I don't see how that affects the app blocking things.
There is no way for me to report as I have tried in the past and it has not gone through and I cannot see the Captcha as I need a VPN  to do that.
It is BLOCKING My ISP and it is annoying.

[mchain]

I think the reason DavidR is asking if you have it on silent mode (and you say you do) is because when in silent mode you will not get any avast alerts.  If you do not see any avast alerts when they happen, you will not be able screen capture that alert and we will not be able to assist because we cannot see what is going on.

A sample screen capture has been attached to this post to show you what we need to see.

You should see a section at the bottom of the alert that describes what the alert is and "Hide alert" ^ is present.

We need to see what avast is blocking.