Jump to content
Sign in to follow this  
marfabilis

SUPERAntispyware 4.39.1002 VS Avira WebGuard

Recommended Posts

I did read a topic about update problems in SUPERAntiSpyware 4.39.1002. I had same problem like reported in this topic:

https://forums.superantispyware.com/index.php?/topic/3854-program-update/

That seemed very strange, because the window opened and closed quickly and was still the version 4.38.1004. I always did the program update and never had such problems. So I checked the logs of my active protections on the machine. I was surprised to find this in Avira´s WebGuard

12/6/2010,03:21:15 [iNFO] [14625] Requested URL: https://www.superantispyware.com/sabupdate.php?request=DOWNLOAD&componentid=1276196639

12/6/2010,03:21:15 [WARNING] [14625] No data to determine the file type available.

12/6/2010,03:21:15 [iNFO] [14627] Remote Address 174.133.41.172:80; Process ID 5216

12/6/2010,03:21:15 [iNFO] [14627] Requested URL: http://components.superantispyware.com/sabcomponents/SUPERANTISPYWARE.EXE

12/6/2010,03:21:16 [DETERMINE] [14627] The URL (http://components.superantispyware.com/sabcomponents/SUPERANTISPYWARE.EXE) was detected as Malware©. It was blocked.

12/6/2010,03:21:16 [iNFO] [14625] Requested URL: https://www.superantispyware.com/sabupdate.php?request=DOWNLOAD&componentid=1276196639

12/6/2010,03:21:16 [WARNING] [14625] No data to determine the file type available.

12/6/2010,03:21:16 [iNFO] [14628] Remote Address 174.133.41.172:80; Process ID 5216

12/6/2010,03:21:16 [iNFO] [14628] Requested URL: http://components.superantispyware.com/sabcomponents/SUPERANTISPYWARE.EXE

12/6/2010,03:21:16 [DETERMINE] [14628] The URL (http://components.superantispyware.com/sabcomponents/SUPERANTISPYWARE.EXE) was detected as Malware©. It was blocked.

12/6/2010,03:21:19 [iNFO] [14625] The local computer has cancelled the connection

12/6/2010,03:22:04 [iNFO] [14623] The remote computer has cancelled the connection

Avira´s WebGuard blocked without warning the connection. When I disabled WebGuard, the SUPERAntispyware´s update was successful.

I´m posting here to provide a feedback if more users also have problems to update the program using the Avira Premium Security Suite.

I'm a community member in Avira´s Forum and i'll report it to be fixed soon.

PS: The database updating is normal, without the prior deactivation of WebGuard.

PS²: This problem is only occurring in WebGuard. When I scanned the SUPERAntispyware´s folder nothing was detected.

PS³: I always use the high protection in WebGuard.

Regards,

Marco

Share this post


Link to post
Share on other sites

I did read a topic about update problems in SUPERAntiSpyware 4.39.1002. I had same problem like reported in this topic:

https://forums.superantispyware.com/index.php?/topic/3854-program-update/

That seemed very strange, because the window opened and closed quickly and was still the version 4.38.1004. I always did the program update and never had such problems. So I checked the logs of my active protections on the machine. I was surprised to find this in Avira´s WebGuard

12/6/2010,03:21:15 [iNFO] [14625] Requested URL: https://www.superantispyware.com/sabupdate.php?request=DOWNLOAD&componentid=1276196639

12/6/2010,03:21:15 [WARNING] [14625] No data to determine the file type available.

12/6/2010,03:21:15 [iNFO] [14627] Remote Address 174.133.41.172:80; Process ID 5216

12/6/2010,03:21:15 [iNFO] [14627] Requested URL: http://components.superantispyware.com/sabcomponents/SUPERANTISPYWARE.EXE

12/6/2010,03:21:16 [DETERMINE] [14627] The URL (http://components.superantispyware.com/sabcomponents/SUPERANTISPYWARE.EXE) was detected as Malware©. It was blocked.

12/6/2010,03:21:16 [iNFO] [14625] Requested URL: https://www.superantispyware.com/sabupdate.php?request=DOWNLOAD&componentid=1276196639

12/6/2010,03:21:16 [WARNING] [14625] No data to determine the file type available.

12/6/2010,03:21:16 [iNFO] [14628] Remote Address 174.133.41.172:80; Process ID 5216

12/6/2010,03:21:16 [iNFO] [14628] Requested URL: http://components.superantispyware.com/sabcomponents/SUPERANTISPYWARE.EXE

12/6/2010,03:21:16 [DETERMINE] [14628] The URL (http://components.superantispyware.com/sabcomponents/SUPERANTISPYWARE.EXE) was detected as Malware©. It was blocked.

12/6/2010,03:21:19 [iNFO] [14625] The local computer has cancelled the connection

12/6/2010,03:22:04 [iNFO] [14623] The remote computer has cancelled the connection

Avira´s WebGuard blocked without warning the connection. When I disabled WebGuard, the SUPERAntispyware´s update was successful.

I´m posting here to provide a feedback if more users also have problems to update the program using the Avira Premium Security Suite.

I'm a community member in Avira´s Forum and i'll report it to be fixed soon.

PS: The database updating is normal, without the prior deactivation of WebGuard.

PS²: This problem is only occurring in WebGuard. When I scanned the SUPERAntispyware´s folder nothing was detected.

PS³: I always use the high protection in WebGuard.

Regards,

Marco

Thanks for this bit of information. I am also an Avira user on Win 7 x64 Professional. I tested the links you posted above and they are indeed being blocked. I added http://*.superantispyware.com to Webguard's Exception list. This prevents Webguard from blocking these critical links of SuperAntispwyare. I am going to post this on the Avira forum as well to get Avira to correct this false positive.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×
×
  • Create New...