Bizarre Online Armor Website Entries

Discussion in 'other firewalls' started by Pentangle, Nov 9, 2010.

Thread Status:
Not open for further replies.
  1. Pentangle

    Pentangle Registered Member

    Joined:
    Oct 22, 2006
    Posts:
    46
    I don't understand how this could have happened and I'm really worried. After a browsing session I noticed a number of Web Sites entered as trusted in OA that I neither saw nor approved.
    Such as:
    www.arabiceurope.com.belkin, fls.doubleclick.net, www.arborvitae19.com.belkin, s0b.bluestreak.com, www.arquivosnaxa.co.cc.belkin, www.architecturemadefresh.com.belkin,
    www.arizona-cabin-rentals.com.belkin, data.coremetrics.com, www.opium.se.belkin, www.ladadadada.net.belkin, fo-anyycs-l.ay1.b.yahoodns.net and several similar others.

    I've never visited any of these web sites and I certainly never trusted them but there they are in OA's trusted website list. I've done a boot scan with Avast and complete scans with SAS and MBAM and all came up clean. I'm always in an LUA and have implemented a software restriction policy. Does anyone have any insights into what might be responsible for these strange entries. Help requested.

    Dell Optiplex GX270 1.5GB RAM
    Intel Pentium4 CPU 2.60GHz
    XP Pro SP3 fully patched
    Maxtor 80GB HDD
    AV: avast! Home Edition 5.0.677
    Browser: Fx 3.6.12
    F/W: Online Armor Premium 4.5.1.431
    Sandboxie Registered 3.50
    SAS Free (on demand)
    MBAM (on demand)
    WinPatrol 2010 Plus
    Spywareblaster
    hpHosts & MVPS Hosts File (via HostsMan)
    LUA and Software Restriction Policy
     
  2. pabrate

    pabrate Registered Member

    Joined:
    Jan 21, 2010
    Posts:
    685
    I have some weird sites as well , have no idea how they put those sites in there and why.
     
  3. acr1965

    acr1965 Registered Member

    Joined:
    Oct 12, 2006
    Posts:
    4,954
  4. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    5,829
    Location:
    Last Breath Farm
    Do you have a Belkin router (or modem)?
     
  5. Pentangle

    Pentangle Registered Member

    Joined:
    Oct 22, 2006
    Posts:
    46
    Yes, I have a Belkin wireless router. I changed the passwords yesterday to be safe. Could this be a factor?
     
  6. Pentangle

    Pentangle Registered Member

    Joined:
    Oct 22, 2006
    Posts:
    46
    Last edited: Nov 10, 2010
  7. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    5,829
    Location:
    Last Breath Farm
    I checked a few (not all) of the sites you listed and they all came up clean at urlvoid.com.
    I would be concerned, as you are, if I saw that in my OA configuration GUI.
    I am nowhere near an expert, Halvah, so I can't advise you except to say what I would do...
    I would untrust each site and see if anything happens to your connection.
    Perhaps the newly trusted sites are part of OASIS ("Online Armor uses OASIS with every protection feature", i.e. maybe not just a whitelist and blacklist of programs).
    I see you have posted your issue on the OA forums.
    That's the best place for it.
     
  8. subratam

    subratam Registered Member

    Joined:
    Nov 14, 2003
    Posts:
    1,310
    Location:
    Issaquah, WA
    These looks to be related to browsing session when some intermediate dns requests were served and supposedly some with aliases.
    OA applies trust statuses according to masks/names, for example - you have a trusted mask for "*.com.au" and then OA finds a "123.com.au"...it will add it as trusted, then it finds some alias name to that 123.com.au... and this alias would be trusted too or not trusted...It depends on the trust status
     
  9. avboy

    avboy Registered Member

    Joined:
    Feb 11, 2008
    Posts:
    165
    Hi,

    In my case I have quite a few sites including banking as protected but no sites are trusted. Today I saw the same banking site that is protected has a separate entry as trusted. This defeats the whole purpose. How can a protected site be also added as trusted? And I know that site has references to yads.zedo.com.

    Many other sites are being added as trusted. I do not want to add ANY of the sites that are protected as trusted and also I do not want OA to add any site as trusted. Some explanations are given at

    Code:
    http://support.online-armor.com/showpost.php?p=134250&postcount=43
    
    In my case this comments also do not hold good.
    Code:
    http://support.online-armor.com/showpost.php?p=134082&postcount=15
    
    I have not specified ANY site as trusted so the explanation of alex on similarities, domains etc are beyond me. If I had added some sites as trusted then it would have still made some sense.

    Can anyone of you who understands these things better explain how this is happening and the whether the explanations given on OA forum have any merit?

    Thanks
     
Thread Status:
Not open for further replies.