nsanedown blocked by ESET

[kantry123]

I do not have a single entry on my exceptions - yet, I never get blocked by nSane or any other site. :naughty:

hahah true bro u havent enabled web filtering thats y maybe

regards

[dcs18]

I do not have a single entry on my exceptions - yet, I never get blocked by nSane or any other site. :naughty:

hahah true bro u havent enabled web filtering thats y maybe

regards

Yep, seen many folks (over TeamViewer) enabling some of these features without having a full understanding of the underlying technicalities.

[duan]

Topic Moved From Security & Privacy News, Also has been renamed to its Origional title : nsanedown blocked by ESET. Sorry for any Inconvenience

link please

[CentOS™]

nsane forums blocked by ESS 9 beta..

http://www.nsaneforums.com/forum/48-software-updates/

This is all key words I've added to "white lists"

[Sonar]

nsane forums blocked by ESS 9 beta..

http://www.nsaneforums.com/forum/48-software-updates/

This is all key words I've added to "white lists"

Front page throwing up threats to "scorecardresearch" & something about google on eset beta 9.

Time;URL;Status;Application;User;IP address
05/06/2015 14:10:58;http://b.scorecardresearch.com/b?c1=7&c2=2000001&c3=1&rn=7fmdne&c7=//www.nsanedown.com/&c8=nsane.down-software, as it should be&cv=1.7;Blocked by internal blacklist;C:\Program Files (x86)\Mozilla Firefox\firefox.exe;

Time;URL;Status;Application;User;IP address
05/06/2015 14:12:00;https://accounts.google.com/o/oauth2/postmessageRelay?parent=//www.nsanedown.com;Blockedbyinternal blacklist;C:\Program Files (x86)\Mozilla Firefox\firefox.exe;

When downloading from the front page

Time;URL;Status;Application;User;IP address
05/06/2015 14:26:01;http://counter.yadro.ru/hit?t50.6;r//www.nsanedown.com/?request=16902072;s1366*768*24;uhttp://anonymz.com/?http://downloadus1.teamviewer.com/download/version_10x/TeamViewer_Setup_en.exe;0.32183191763834074;Blockedbyinternal blacklist;C:\Program Files (x86)\Mozilla Firefox\firefox.exe;

These threats repeatably keep popping up when the front page is open, the forum has no problems.

I already have *.nsanedown.com/* & *.nsaneforums.com/* in the filter settings, just recently started after an update by eset.

[Saket]

With latest beta version of eset 9.0.117.0... sometimes filter works & sometimes it blocks... so i use this site using tor browser & it opens smoothly ;)

[SnakeMasteR]

nsane forums blocked by ESS 9 beta..

http://www.nsaneforums.com/forum/48-software-updates/'>http://www.nsaneforums.com/forum/48-software-updates/

Browse this way

http://www.nsaneforums.com/forum/48-

[steven36]

With latest beta version of eset 9.0.117.0... sometimes filter works & sometimes it blocks... so i use this site using tor browser & it opens smoothly ;)

There is and error in the beta witch causes you to lose whiltelist settings on reboot its already been posted at Esset . There going fix it on the next update. For now you need ether use stable or make a regfile to re-import them after you reboot.

[CentOS™]

nsane forums blocked by ESS 9 beta..

http://www.nsaneforums.com/forum/48-software-updates/'>http://www.nsaneforums.com/forum/48-software-updates/

Browse this way

http://www.nsaneforums.com/forum/48-

I've uninstall it. I'm using ESS 8.0.319.0 and it isn't block this forum

[R3dMan]

nsane forums blocked by ESS 9 beta..

http://www.nsaneforums.com/forum/48-software-updates/'>http://www.nsaneforums.com/forum/48-software-updates/

Browse this way

http://www.nsaneforums.com/forum/48-

I've uninstall it. I'm using ESS 8.0.319.0 and it isn't block this forum

No problem here!!

[steven36]

nsane forums blocked by ESS 9 beta..

http://www.nsaneforums.com/forum/48-software-updates/'>http://www.nsaneforums.com/forum/48-software-updates/

Browse this way

http://www.nsaneforums.com/forum/48-

I've uninstall it. I'm using ESS 8.0.319.0 and it isn't block this forum

Easy way

*proxy.nsanedown.com**www.nsanedown.com**www.nsaneforums.com*

I also run Malvertising filter list by Disconnect‎ and Malware filter list by Disconnect‎ in my ad-blocker they dont block nsane at all . :)

[Jordan]

no more blocked! :cheers:

[L2D]

Hi,

I was able to unblock nsanedown but I can't download the files. Chrome blocks the file saying is malicious..

Google Chrome blocks downloads

Chrome automatically blocks harmful downloads that try to cause problems on your computer, like:

• Giving you viruses
• Leaking your private data
• Changing your browser and computer settings
• Adding unwanted extensions or toolbars to your browser

Why the download was blocked

Your file download may have been blocked for one of two reasons:

• We think it might be a malicious, unwanted, or uncommon file.
  • Malicious: You tried downloading malware.
  • Unwanted: You tried downloading a deceptive piece of software. This program, disguised as a helpful download, may actually make unexpected changes to your computer.
  • Uncommon: You tried downloading an unfamiliar and potentially dangerous piece of software.
• We've found that the website you tried to download the file from has been known to distribute malware.

Can you help? Thanks.

[ilcorsaro73]

eset smart securty 9 block search page in home page nsane (google custom search) How can I solve it? thanks in adavance for help

[dMog]

add nsane domains to the do not block list in eset

[Odd Ramos]

ESET NOD 32 v8.0.319.0 with Virus Signature Database 12713 (2015-12-12) detects .url files containing the link to http://www.nsanedown.com as a virus:

 

nsane.down - software, as it should be.url - LNK/Agent.CH trojan

 

 

I've noticed this at least a month ago after one of the ESET virus signatures updates.

 

I have disabled protocol filtering in ESET NOD 32 and added *nsanedown.com* to a whitelist, but it didn't help.

Actually protocol filtering has nothing to do with this issue, because NOD 32 is detecting .url files according to its virus database. 

 

In order to disable this automatic false positive detection, one has to do add exclusion for .url files in ESET advanced setup under Real-time file system protection:

 

 

 

 

 

 

 

In order to exclude .url files detection when performing a manual scan, one needs to apply very similar changes for every scan profile (In-depth scan, Context menu, Smart etc.):

 

 

 

 

 

Also ESET has Exclusion functionality, but I wasn't able to find a syntax that could exclude .url files from all

directories. The example below excludes .url files only from the root of C and D drives, but not from subfolders, e.g. D:\Downloads etc.:

 

 

If anyone knows the syntax that would exclude .url files from all existing directories, please let me know.

 

Thank you.

[unknownasphyxiated]

@Odd Ramos

i don't think it's safe to exclude all .url files

what you download from nsane might be a safe file but what happen if you download .url files from malicious website?

to avoid detection, just extract the main file

no need to extract all

[Odd Ramos]

@unknownasphyxiated

 

I agree.

 

Does anybody know a working solution to specifically exclude .url files linking to nsanedown from false positive detection?

[steven36]

15 minutes ago, Odd Ramos said:

@unknownasphyxiated

 

I agree.

 

Does anybody know a working solution to specifically exclude .url files linking to nsanedown from false positive detection?

All you have to do is exclude  the websites in url magment this all i ever had to do

*www.nsanedown*

*www.nsaneforums.com*

*proxy.nsanedown.com*

Then it will still scan any thing else that’s not part of nsane, it not rocket science .  I never had a problem  using  this site with v8 of NOD32  after doing this.

 

If Google is blocking  the site then you must uncheck  check for malware   in whatever browser you use  . its not antivirus  related.

 

 

[Odd Ramos]

@steven36

 

We are not talking about web url addresses that get blocked by ESET in our web browsers.

 

We are talking about .url files that link to http://www.nsanedown.com:

 

 

 

Chech this .url file below and scan it with ESET.

 

nsane.down - software, as it should be.URL

[longlamlinh]

help me pls!!can not download with nsanedown.com

thanks

Site: http://i.imgur.com
Sharecode^[?]: /pcvzUem.jpg

[DKT27]

4 hours ago, longlamlinh said:

help me pls!!can not download with nsanedown.com

thanks

Site: http://i.imgur.com
Sharecode^[?]: /pcvzUem.jpg

 

Press Ignore this warning on the below right part. Then you will have try downloading again.

 

Alternatively, you can disable this completely, but it will effect all the sites. Open Firefox settings > Security > Uncheck Block reported attack sites.

 

The reason is simple, Firefox uses Google's database for these sites and Google has blacklisted proxy for these idiotic reasons called - unwanted software. There is probably no way to tell Google that they are wrong and Firefox will not implement a whitelisting feature. So we have no other option I think.

[Reckkenz]

Can't seem to add nsane to exclusion list....

[KXR75]

del

[Cereberus]

On 12/15/2015 at 3:49 AM, steven36 said:

All you have to do is exclude  the websites in url magment this all i ever had to do

*www.nsanedown*

*www.nsaneforums.com*

*proxy.nsanedown.com*

Then it will still scan any thing else that’s not part of nsane, it not rocket science .  I never had a problem  using  this site with v8 of NOD32  after doing this.

 

If Google is blocking  the site then you must uncheck  check for malware   in whatever browser you use  . its not antivirus  related.

 

 

 

doesn't seem to work anymore for nsanedown. forums seems fine though. excluding tukero worked though, but guess they hate nsanedown :/

 

but this worked 

Quote

*.nsanedown.com/*

*.proxy.nsanedown.com/*