Webroot Blocks its own webpage?!

Discussion in 'Prevx Releases' started by VectorFool, Dec 10, 2012.

Thread Status:
Not open for further replies.
  1. VectorFool

    VectorFool Registered Member

    Joined:
    Oct 21, 2012
    Posts:
    280
    Location:
    India
    webroot.jpg

    see above
     
  2. zfactor

    zfactor Registered Member

    Joined:
    Mar 10, 2005
    Posts:
    6,102
    Location:
    on my zx10-r
    i get a error when i visit that page "This XML file does not appear to have any style information associated with it. The document tree is shown below." but no pop up from webroot.
     
  3. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    anywhere.webrootcloudav.com doesn't serve any content and is likely blocked just for testing purposes. You shouldn't have to visit it - the communications which WSA makes take place in the background and not across a web browser.
     
  4. zfactor

    zfactor Registered Member

    Joined:
    Mar 10, 2005
    Posts:
    6,102
    Location:
    on my zx10-r
    why is this not blocked for me? just curious why two people would have a different result?
     
  5. VectorFool

    VectorFool Registered Member

    Joined:
    Oct 21, 2012
    Posts:
    280
    Location:
    India
    funny thing is i visited that page through webroot's Indian website
     
  6. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    Are you sure? o_O -https://anywhere.webrootcloudav.com/zerol/wsainstall.exe

    It does serve some content, at least. :D

    -edit-

    I think I got that link from Softpedia. I hope it's OK to post it. :)
     
  7. Triple Helix

    Triple Helix Specialist

    Joined:
    Nov 20, 2004
    Posts:
    13,275
    Location:
    Ontario, Canada
    It's the correct download link to the install file of WSA. But using -https://anywhere.webrootcloudav.com does nothing.

    TH

    Capture11-12-2012-10.21.30 AM.jpg
     
    Last edited: Dec 11, 2012
  8. VectorFool

    VectorFool Registered Member

    Joined:
    Oct 21, 2012
    Posts:
    280
    Location:
    India
    Then why was the page blocked and the message "contains malicious content"?
    False positives are forgivable, but identifying own webpage as malware distributor is funny to say the very least :D
    These kinda events may lead to users not taking Webroot as seriously as they should.

    here is another example of a false positive

    portal.bsnl.in its my online telephone bill payment portal
    bsnl is a govt of India Telecom giant
     
  9. Triple Helix

    Triple Helix Specialist

    Joined:
    Nov 20, 2004
    Posts:
    13,275
    Location:
    Ontario, Canada
    I never got a block so give a try again and report back.

    TH
     
  10. TonyW

    TonyW Registered Member

    Joined:
    Oct 12, 2005
    Posts:
    2,741
    Location:
    UK
    I get no alert from WSA, but in Firefox I get the 'This Connection is Untrusted' page.
     
  11. TonyW

    TonyW Registered Member

    Joined:
    Oct 12, 2005
    Posts:
    2,741
    Location:
    UK
    No alert from WSA for me either.
     
  12. Triple Helix

    Triple Helix Specialist

    Joined:
    Nov 20, 2004
    Posts:
    13,275
    Location:
    Ontario, Canada
    Same here no alert. o_O

    TH
     
  13. Triple Helix

    Triple Helix Specialist

    Joined:
    Nov 20, 2004
    Posts:
    13,275
    Location:
    Ontario, Canada
    Yes I see it now Tony as I had "Block reported Attack Sites" unchecked in FF.

    TH
     
  14. fax

    fax Registered Member

    Joined:
    May 30, 2005
    Posts:
    3,898
    Location:
    localhost
    There may be other problems than WSA on the system? o_O
     
  15. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    We removed the detection early today so you should be fine to visit it now :)
     
  16. VectorFool

    VectorFool Registered Member

    Joined:
    Oct 21, 2012
    Posts:
    280
    Location:
    India
    and what about the detection of portal.bsnl.in?:)
     
  17. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    If you can send any missed detections or false positives to our research team, they will be able to investigate them closer.

    Thanks!
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.