Block malicious website again?

Discussion in 'Prevx Releases' started by ams963, Nov 10, 2012.

Thread Status:
Not open for further replies.
  1. ams963

    ams963 Registered Member

    Joined:
    May 3, 2011
    Posts:
    5,965
    Location:
    Parallel Universe
    Hi,

    When a webpage is blocked by wsa a small window appears and asks to allow or block the webpage and says that the webpage is blocked.

    If I allowed the page wsa gives another window saying webpage blocking has been determined and is allowed.

    From now on I can visit the webpage no problem.

    I want to know two things:

    1. The first window says the page has is known for malicious content. It would be nice if I could know what that content might be.

    2. How do I block it again now that it's allowed and page will load?

    Also now that I've allowed the page even after wsa said my privacy and my computer could be comprised by prompting a small window, will wsa still save me? Are there other tools in place for malware or attacks from the webpage which I had allowed?

    Best Regards,
    Amit
     
  2. pegas

    pegas Registered Member

    Joined:
    May 22, 2008
    Posts:
    2,016
    WebShield is inconsistent as regards the blocking of malicious websites.

    https://www.wilderssecurity.com/showpost.php?p=2139953&postcount=10

    Webroot support said:
    Development is aware of the behaviour you reported, the fix however is not a simple one to address but is definitely scheduled for a resolution. We don't have an ETA unfortunately on this, but any updates we have will be shared with you once available.
     
    Last edited: Nov 10, 2012
  3. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,012
    Location:
    Ontario, Canada
    Hi Amit,

    To clear the allowed website you have to go into Settings>Advance Settings>Web Threat Shield>Website Filter>View Websites and click on remove the site that you allowed. And yes if there was some kind of malware from the Blocked Website WSA would detect any payload it tried to download and install and if it was unknown then it would set the malware to untrusted and start Journaling then when the Cloud does determine the file to be bad it would rollback the system before the infection took place.

    TH
     
  4. ams963

    ams963 Registered Member

    Joined:
    May 3, 2011
    Posts:
    5,965
    Location:
    Parallel Universe
    @pegas
    Oh I see. Thanks for the heads up. :)
     
  5. ams963

    ams963 Registered Member

    Joined:
    May 3, 2011
    Posts:
    5,965
    Location:
    Parallel Universe
    @Triple Helix
    Ah thanks a lot Daniel. :thumb: Now I understand. :D
     
  6. pegas

    pegas Registered Member

    Joined:
    May 22, 2008
    Posts:
    2,016
    The WebShield malfunctions described in this thread still persist in the latest build (.85).

    BTW, I really miss a decent bug tracking system like Opera has. It is exhausting to be going through threads and be searching for the unsolved issues.
     
  7. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    In the meantime, you can add known malicious websites that you want to block in the Web Threat Shield settings proactively if you prefer. This will block them from being accessed across all browsers.
     
  8. pegas

    pegas Registered Member

    Joined:
    May 22, 2008
    Posts:
    2,016
    There is no difference in blocking except wording in the WSA prompt where "... a known threat ..." is replaced by "... user defined rule ...". Blocking in Opera fails regardless a site is blocked by a user rule or by WSA itself. You go to a bad site, a prompt jumps out and if you leave this prompt intact for a while, the bad site loads anyway. If you press Block the bad site loads as well and another 3 tabs with Google search are opened. I have discussed this issue with JimM from Webroot via the support system and he confirmed they could reproduce this issue. Moreover they discovered inconsistence in blocking in IE9 where sometimes it blocks correctly and sometimes not ending up in crashing of IE9. I am still waiting for a fix.
     
  9. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,012
    Location:
    Ontario, Canada
    I can also confirm with Win 7 x64 with Opera 12.11 and inconsistence in blocking in IE9 both 32bit & 64bit Browsers but Firefox seems fine.

    TH
     
  10. pegas

    pegas Registered Member

    Joined:
    May 22, 2008
    Posts:
    2,016
    Thx TH for the confirmation ;) Hope Joe will expedite this issue with his development team.

    While it is not a big issue because even though WebShield fails there are other modules in WSA which stand up for your security but it is annoying to see "bad pages" loading beneath WSA warning :doubt:
     
  11. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Thanks - I'll take a look. It is probably due to changes in Opera as this was working at one point.
     
Thread Status:
Not open for further replies.