Avast is blocking a “streaming news” Java applet from Money.Net and I haven’t been able to figure out how to get it to run. I tried excluding the URL in several places but no luck.
The strange thing is, when I pause or even terminate all of the providers, the applet is still blocked. But when I turn Avast off completely, the Applet runs fine!
Any suggestions would be much appreciated.
TIA,
Richard
Hi,
Do you know what provider is blocking this applet? Do you get any alerts from avast?
avast doesn’t block, it scans content and if infected it will alert you, it doesn’t block, it isn’t a firewall.
The strange thing is, when I pause or even terminate all of the providers, the applet is still blocked. But when I turn Avast off completely, the Applet runs fine!
The first part would tend to support what I said but the second is strange that would tend to indicate a conflict with another program.
What is your firewall ?
Are you having to logon to money.net to get your news stream ?
I have tried figuring out which provider is causing the problem but haven’t been able to pin it down. I’ve tried the usual one by one approach, turning off the first, then the second, then the third and so on, and then I try to run the Java applet after each. No go.
I then tried turning off the first and leaving it off, then the second and leave it off, until all the providers are turned off. Still no go.
But when I turn off Avast altogether, the Java applet runs fine. Other Java applets run fine alongside Avast without any problem.
Avast gives no alerts at any time.
What is your firewall ?
I am using Kerio. I assumed at first that Kerio was the problem so I tried different setting with no luck. I turned Kerio off altogether and still no luck. With Kerio fully disabled, the applet still won’t run as long as Avast is running. With Kerio off and Avast on, no applet. But again, if I turn Kerio back on, and turn Avast off, the applet runs fine.
Are you having to logon to money.net to get your news stream?
Yes, the login is through a standard webpage. Click the login button, enter username and password, and click submit. A subsequent webpage loads, which contains some content, along with the usual applet window. It says “Connecting to Server” like any typical Java applet, but there it stalls.
I have seen this type of thing with Zone Alarm Pro with its privacy settings on High, usually effecting logging on to the likes of hotmail and yahoo. somehow the privacy settings and avasts web shield conflict (which should be the only provider that would have any potential for conflict) effectively blocking the connection. So I don’t know if there is something similar going on here.
Do you have any similar privacy function or tools in use ?
Did you try terminating web shield rather than pausing it ?
I assume that the log on switches between an https secure page and regular http page, somehow in this switch between secure and normal pages data isn’t transferred and the connection fails. Although I’m at a bit of a loss as to why it is happening. It may be worth a forum search for Kerio and your problem to see if this has happened before, but I can’t recall it.
Did you try terminating web shield rather than pausing it ?
Ah. This suggestion has just fixed the problem, although I’m not sure what it means insofar as Avast’s role is concerned. While testing, I always ‘paused’ the various providers, one at a time and then cumulatively. I just ‘stopped’ the WebShield, and the problem applet fired right up.
From this, I’m assuming that Avast (while not a firewall) somehow blocked the problem applet.
Now I need to figure out how to allow the applet to run with WebShield enabled, since I don’t want to sacrifice that protection from Avast just to run one applet 
???
From this, I'm assuming that Avast (while not a firewall) somehow blocked the problem applet.No from this I take it there is some form of conflict because web shield isn't designed to physically block. As I mentioned I have no idea what that conflict might be with the firewall or other privacy tools you might have. I have zero knowledge about Kerio but there are many other forum users using Kerio and this is the first I have heard of something like this, so I'm a bit baffled too.
Kerio advanced (privacy) features could block Java scripts…
Java Applets (requiring Sun’s Java) are different from JavaScript, but it may be possible that the higher you set the Privacy setting it could have the same effect as ZA Pro’s privacy function.
One problem with Kerio being a possible explanation for the applet stalling is that Kerio’s advanced web filtering capability is only available in the paid edition. I am running the free version and these features are not enabled.
Another reason is that the applet is still blocked, even when I exit from Kerio entirely. It can’t be blocking the applet if it isn’t running
After exiting Kerio – and then stopping (not pausing) Avast’s WebShield, the applet runs. When I restart the WebShield, with Kerio off, the applet stalls.
Hello guys,
this problem is rather common with WebShield, I must admit. The reason is that several JAVA Applets use port 80 which is monitored by WebShield to transfer non HTTP data. They may seem like regular HTTP requests but the applet requires some specific conditions on the stream. E.g. it uses the HTTP request just to create the connection and then transfer data in both directions, wait for a confirmation from the other side etc. Since the applet is not aware of the fact that there is a HTTP proxy in between it sometimes does not work properly.
From the other side, as JAVA Applets are running inside the browser’s process WebShield has now way to distinguish between regular HTTP data and this corrupted stream. Where the JAVA applet is polite enough to use some of the common streaming protocol in the HTTP header content-type, WebShield ignores such traffic, but in the other cases you have to ignore the URL and/or sometimes the whole server from WebShield redirect.
Enter the name or IP address of the server your JAVA applet is connecting to into the “Ignored Addresses” field on WebShield’s configuration page.
If you post here the URL and the steps that are required to reproduce the problem, I’ll look at it and may possibly find some other method of ignoring the traffic in the future versions.
Cheers,
Lukas.
If you post here the URL and the steps that are required to reproduce the
problem, I’ll look at it and may possibly find some other method of ignoring
the traffic in the future versions.
I tried entering the server info on the WebShield ignored field but could not get the applet to work. I tried to exclude the whole server by entering http://money.net and also money.net but neither will allow the applet to run.
The server where the applet resides is:
http://money.net
The codebase URL is:
http://money.net/phpscripts/newsviewer/
The applet name is
“com.moneynet.applet.newsviewer.NewsViewerApplet.class”
Here are the steps I follow which produce the problem:
I go to http://money.net and click the “Member Login” button in the upper left part of the screen. I enter my user name and password. This causes a subsequent window to open with some ‘launch’ buttons to that will launch the News Streamer product. The URL for that particular button is:
javascript:window.open('http://money.net/scripts/launchproduct? (followed by some parameters which include my username and password).
This opens a browser window that contains some content in several frames, and the Java applet window. The applet window reads, “Loading Streaming News…Connecting to Server…” but it stalls and nothing more happens.
Ok, maybe the applet is connecting to some other server for the streaming. Open the app (with webshield disabled), make sure it is working and the run TCPVIEW from http://www.sysinternals.com/Utilities/TcpView.html. It will show you all open connections together with their IP addresses. Use the IP you see in the Remote-Address column.
(you might want to turn off the name resolution in menu Options / Resolve Addresses)
Good news! Following your suggestions, I experimented further and finally have the problem applet running with Avast WebShield enabled. I downloaded and ran TCPVIEW and found that two different streams were active sporadically, one at www.money.net and the other at l1data.money.net (both were identified as http streams).
I entered both on the ‘Ignored Addresses’ field in WebShield. No go. However, when I entered both servers on the Ignored Addresses list AND on the Exceptions tab, URLs to Exclude, the applet fired right up. I experimented a bit and found that if the URLs are listed only one place and not the other, it doesn’t work – they have to be listed both places.
I appreciate your help in getting the applet to run; I have been going around and around with Money.Net for over a month complaining about this!. Hopefully, some of the details reported above will help you pinpoint what is going on for future versions. If I can provide any other information from this end, let me know.
Avast keeps blocking java applet for the website www.icharts.in
once the webshield is off, it runs…please help.
I encountered the same problem with a secure financial website which uses a java applet. With avast webshield ON, it just refuses to connect/load. I thought that the app might not like any interference of any kind but how would an applet know it was being monitored by avast shields?
Unable to find any solution, I just had to add a global exception to the website altogether. And now its fine.
Amigo e onde faço e como faço essa modificação, pois o meu avast esta bloqueando site financeiro tambem.