Annoying Avast Warning

All techspot article webpages including the forum are 'positive'. I already reported the incidence as 'false positive' to avast as soon as I got the annoying avast warning.
 
@misor we've checked with two different PCs running Avast and no warnings are popping up. Also look at the warning screenshot that you posted, the URL shows some weird "hxxp" URL before the techspot.com part.

At this point I'd consider two possibilities:

1) There is a resident malware/adware installed in your system that is taking over TechSpot's ads and showing potentially harmful code. If so, TechSpot shouldn't be the only site showing the warnings however. I would start by running Anti-malware and making sure my system is clean:

https://www.techspot.com/downloads/4716-malwarebytes-anti-malware.html

2) The warning is being generated because of some ad campaign in our rotation (strange but it could happen), if you see the same ads every time these warnings come up, I could use that information to narrow things down on our end.
 
Going a bit deeper on the matter, here's a similar report from a different forum and it appears it's an Avast false positive coming from an Amazon advertisement, so hopefully it's all good. (y)
 
jobeard said:
On Win/7/Pro Sp1 with Avast Free - - I get no such alerts :)
Click to expand...
as of 606AM (Philippine local time), I no longer have the 'annoying avast warning', about 6 or 7 hours after I reported the incidence as 'false positive' to avast.
maybe avast has already issued a fix on their virus definition updates or the 'amazon ads' were already removed.
 
coming from an Amazon advertisement
Click to expand...
As my etc\hosts file blocks tons of sites serving ads,
my environment just may not stress Avast in these cases (y):cool:
 
Julio Franco said:
@misor we've checked with two different PCs running Avast and no warnings are popping up. Also look at the warning screenshot that you posted, the URL shows some weird "hxxp" URL before the techspot.com part.

At this point I'd consider two possibilities:

1) There is a resident malware/adware installed in your system that is taking over TechSpot's ads and showing potentially harmful code. If so, TechSpot shouldn't be the only site showing the warnings however. I would start by running Anti-malware and making sure my system is clean:

https://www.techspot.com/downloads/4716-malwarebytes-anti-malware.html

2) The warning is being generated because of some ad campaign in our rotation (strange but it could happen), if you see the same ads every time these warnings come up, I could use that information to narrow things down on our end.
Click to expand...
no unusual ads on my part.
on ie for windows 8, the usual ads appear:
1. lozada ads, an online shopping website in the Philippines. assumed to be safe since the site also is also advertised on major Philippine newspapers/tv stations.
2. smart telecom ads, a Philippine telecom giant. also safe.
 
Additional info:
internet explorer is set to avast search (yahoo search customized to avast).
I 'fixed' the problem by changing the default search to Microsoft bing.
so far no more annoying avast warning.

also, the same thing happened every time I open Mozilla thunderbird client (with techspot set to open when the email client is launched.
annoying avast warning also disappeared by changing the default page back to Mozilla thunderbird.
ts thunderbird.png

the suspicious site is changed by avast so it becomes an invalid url (http to hxxp):
hxxp://54.201.66.36/l/z0WVjCBSEeGLoxIxOQVEwQ?or=
ts suspicious site.png
 
Last edited:
Merged threads here, it was reported earlier by @misor and I've found similar false positives on other sites. It's unfortunate though as I thought the issue was over.
 
For internet explorer, the issue was resolved by changing the search engine in internet explorer from avast search (yahoo search customized for avast) to Microsoft bing.

for Mozilla thunderbird , changing startup page from techspot to Mozilla (or none at all) fixed the problem for me.

so far, no more annoying avast warning for the past two days or so.
 
Hmm; contrary to all known scanning techniques.

The HOME page or the search engine have nothing to do with scanning weblinks.
When we click on a link, the AV scans the source being delivered and allows/blocks it depending upon the page content.

*IF* you are correct in your assertion, then reverting to the original settings would again produce popup alerts.
THAT would put Avast in a serious doubt as to its effectiveness.

IMO, reverting will not produce alerts and the issue was created by a malconfigured/implemented browser.
A secondary test would be to use the apparently failing settings in a different browser and a re-occurance of alerts fingers Avast, and an absence thereof fingers the failing browser.

Just my $0.02
 
  • Like
Reactions: Cobalt006
Then delete the custom search engine from the browser configuration but keep a short cut in
the Favorites Bar.

If YOU want to search, directly access a specific search engine. I just H A T E these intrusive settings and now you know why - - they access stuff you don't intend.

Technically, Avast is performing correctly and so is your browser (if you don't add junk to it). The fault is the unique search engine setting itself.

While were with this topic, I'll explain how to avoid triggering the AV due to adverts.

1) install Spywareblaster and immunize (exit all browsers while this is being performed).

2) install Spybot S&D, get the updates, go to Advanced Mode, and Immunize again. This adds entries to your etc\hosts file to stop access to urls like those shown in the attached file

[*] you can't get a popup from these as they can't be access :)
[*] you gain browser performance by not loading averts :)
[*] you don't spin CPU time as the blocking is done via the DNS lookup mechanics.
 

Attachments

  • ad_filters.txt
    25.3 KB · Views: 1
  • Like
Reactions: misor
The funny thing is avast search (yahoo search customized for avast) did not trigger the annoying avast warning in the past months until about 5-6 days ago.
maybe avast update did something to it.

and I could not fathom why the warning cannot be triggered in Mozilla firefox while it can be triggered in Mozilla thunderbird. perhaps because I have adblock in firefox?
 
You must log in or register to reply here.

Similar threads

A
Printer manufacturer infected customer PCs for months
Replies
4
Views
204
hwertz
H
Daniel Sims
GPU tourism is a thing: Japan blocks RTX 5090 and 5080 sales to tourists amid global GPU chaos
Replies
5
Views
228
DrSuess
D
midian182
Avast Free Antivirus: Testing its features and learning about the six layers of protection
Replies
0
Views
793
midian182
midian182

Latest posts

Back