While I was out this evening, I received the latest update on all of my machines (0605-0). Now, whenever I open my browser, I get a malware warning (script). I believe this is due to my use of Proxomitron as my ad blocker of choice. It appears that Proxomitron is prepending and appending some script code at the start/bottom of each web page that it visits. Note that this was never flagged as an issue before the latest update.
How concerned should I be? If Avast continually flags every web page I visit while Proxomitron is enabled, I see I have several choices: stop using Proxomitron and use an alternative; stop using Avast and use an alternative; tolerate the warnings for every page.
How concerned should I really be? Is Proxomitron really placing malicious code in the web pages, or is it just code to help it block ads and popups?
Oh, I use Firefox, that’s not the problem, but you try and retrain a loved one to use a new browser! Having said that, I’ll go ahead and do it if it’s not sorted in the next few days. I’ll get Opera on here probably.
I can certainly look at using FireFox; it has ad-blocking built in, right? And wouldn’t Proxomitron still add it’s $0.02 to the html to block ads (if I still used it)? I’m not sure switching browsers fixes the problem ---- looks like a false positive to me.
Oh it’s a false positive alright, but whatever the reason, I don’t get the problems with Firefox. I’d say use Firefox as a stopgap until the problem gets fixed. You may even move permanently anyway.
Hopefully the virus guys will have a look at it shortly.
BTW Blanka I see your based in the UK but your first name (or your nick) looks very Czech. How come?
I’m getting the same problem with every browser I use that connects through Proxomitron. If I change settings so that the browser doesn’t connect through Proxomitron, close and re-launch, I have no more problems.
The behavior is identical with Firefox, my default browser, IE6 SP1, Opera, Mozilla and Avant (which is basically just IE6 with its own shell). In each case, the cached .HTM and .ASPX files return the same false positives - regardless of browser. The behavior is always the same.
Very frustrating. I just spent much of the day trying to figure out what was writting that script code into the top and bottom of those files.
That’s what I would have expected. For now, I’ve curtailed browsing, and I just “bypass” Proxomitron while I’m on the net. Not ideal … but at least it doesn’t throw the false positive warnings when I’m on the web.
Hmm… I guess it’s the way I’ve got Firefox then that doesn’t get it spouting viruses at me all the time… At any rate, I’m not getting them at the moment but it’s still a pain in the backside because a few applications, namely Steam in my case, access webpages using IE and I get virus warnings whenever I login…
And Vlk, the nickname comes from many many hours of playing Street Fighter 2! Brilliant game!
How about letting Web Shield ignore local communication (On-Access Protection Control>Web Shield>Basic>check “Ignore local communication”) and monitor Proxomitron? Of course, this is not a conclusive solution but may work.
About the Off Topic, I thought it is spelled Blanca in English…though the setting is Venice, Cassio’s mistress had this name, for example. There are some local variations in Europe but basically, the name sounds feminine to me while the illustration is quite contrary… ;D
Igor, I can confirm that the problem regarding 0605-0 VPS and Proxomitron was solved in 0605-1 VPS. I could’n t understand, though, why this false alarm appeared randomly. Out of 5 identically PC’s, only one had this annoying problem.
On the other hand, could you explain to me please the logic in numbering the VPS versions ? Other AV products release their updates in a dd/mm/yyyy form. Thanks in advance
Having said that, I’ll go ahead and do it if it’s not sorted in the next few days. I’ll get Opera on here probably.