Windows Security Alert

Request help with using Avant Browser here.

Moderators: Support Staff², Support Staff, AvantGuard, Developer

User avatar
Arandora
Semi-Avantic
Semi-Avantic
Posts: 474
Joined: Sat Aug 09, 2003 10:33 pm
Windows Version: Win 8.1 64 PC/Win 8. 64 laptop
Avant Version: Both AB Lite 2016 v2
Default engine: IE11 Standards
IE Version: IE 11 on PC and laptop
Skin: Aluminium
Location: Poulton-le-Fylde, UK

Windows Security Alert

Post by Arandora » Wed May 06, 2015 10:37 am

Don't know whether this is an AB or Internet Explorer or Windows 8.1 issue but it has started in the last few days on both my Desktop PC and laptop both of which are configured the same with Win 8.1, IE 11 and AB Ultimate 2015 b10 and started to happen on AB at the same time on both. When I open a new tab and on refreshing some already open tabs I receive a Windows Security Alert as shown in this uploaded Screen shot Image
I have followed the procedures to add the certificate to my local trusted stores but it still keeps popping up. I've Googled extensively but cannot find a solution. I've seen references to it being an Outlook issue (I'm using Outlook 2010 on my PC, Outlook 2007 on my laptop) but it doesn't occur on Outlook, only in AB. I've tried copying the URL in to IE 11 and Chrome tabs but they load OK.
Any ideas.
Laptop Windows 8.2 64 bit, IE11; PC Win 8.1, IE11. Both AB Lite 2016 b 2 IE Favorites, IE11 Standards rendering engine.

User avatar
MysteryFCM
Administrator
Administrator
Posts: 7330
Joined: Tue Dec 09, 2003 2:34 am
Windows Version: 10, 8.0, 8.1, 7, Vista, XP
Avant Version: 13.00 Build 23
Default engine: Gecko
IE Version: 7.x, 8.x, 9.x, 10.x, 11.x
Skin: AthenX
Location: Newcastle Upon Tyne, UK
Contact:

Re: Windows Security Alert

Post by MysteryFCM » Wed May 06, 2015 1:35 pm

The error indicates the site is using an invalid or self-signed certificate. It's not specific to Outlook, but to the connection (regardless of whether its via the browser or via the client)

User avatar
Arandora
Semi-Avantic
Semi-Avantic
Posts: 474
Joined: Sat Aug 09, 2003 10:33 pm
Windows Version: Win 8.1 64 PC/Win 8. 64 laptop
Avant Version: Both AB Lite 2016 v2
Default engine: IE11 Standards
IE Version: IE 11 on PC and laptop
Skin: Aluminium
Location: Poulton-le-Fylde, UK

Re: Windows Security Alert

Post by Arandora » Wed May 06, 2015 4:24 pm

So, I just put up with it and keep clicking Yes to proceed?
Laptop Windows 8.2 64 bit, IE11; PC Win 8.1, IE11. Both AB Lite 2016 b 2 IE Favorites, IE11 Standards rendering engine.

User avatar
MysteryFCM
Administrator
Administrator
Posts: 7330
Joined: Tue Dec 09, 2003 2:34 am
Windows Version: 10, 8.0, 8.1, 7, Vista, XP
Avant Version: 13.00 Build 23
Default engine: Gecko
IE Version: 7.x, 8.x, 9.x, 10.x, 11.x
Skin: AthenX
Location: Newcastle Upon Tyne, UK
Contact:

Re: Windows Security Alert

Post by MysteryFCM » Thu May 07, 2015 3:41 pm

If you need the site, then yes (you could install the cert in your trusted root store (View Certificate -> Export then import into the root store), but I'd seriously advise against that, legit sites should be using valid certs)

User avatar
Arandora
Semi-Avantic
Semi-Avantic
Posts: 474
Joined: Sat Aug 09, 2003 10:33 pm
Windows Version: Win 8.1 64 PC/Win 8. 64 laptop
Avant Version: Both AB Lite 2016 v2
Default engine: IE11 Standards
IE Version: IE 11 on PC and laptop
Skin: Aluminium
Location: Poulton-le-Fylde, UK

Re: Windows Security Alert

Post by Arandora » Thu May 07, 2015 3:53 pm

I don't underst6and why it is popping up randomly on any previously visited and trusted site, including this one when I load it or transfer from an Emaiol link.
Laptop Windows 8.2 64 bit, IE11; PC Win 8.1, IE11. Both AB Lite 2016 b 2 IE Favorites, IE11 Standards rendering engine.

User avatar
MysteryFCM
Administrator
Administrator
Posts: 7330
Joined: Tue Dec 09, 2003 2:34 am
Windows Version: 10, 8.0, 8.1, 7, Vista, XP
Avant Version: 13.00 Build 23
Default engine: Gecko
IE Version: 7.x, 8.x, 9.x, 10.x, 11.x
Skin: AthenX
Location: Newcastle Upon Tyne, UK
Contact:

Re: Windows Security Alert

Post by MysteryFCM » Thu May 07, 2015 4:01 pm

Chances are it's a bogus certificate (without seeing the cert I can only speculate), especially if its randomly. This is usually indicative of a browser infection (e.g. rogue extension)

Can you export the certificate and attach it here please?

User avatar
Arandora
Semi-Avantic
Semi-Avantic
Posts: 474
Joined: Sat Aug 09, 2003 10:33 pm
Windows Version: Win 8.1 64 PC/Win 8. 64 laptop
Avant Version: Both AB Lite 2016 v2
Default engine: IE11 Standards
IE Version: IE 11 on PC and laptop
Skin: Aluminium
Location: Poulton-le-Fylde, UK

Re: Windows Security Alert

Post by Arandora » Thu May 07, 2015 5:17 pm

Here's a screen shot of the General details of the Certificate.
Image
Is that enough or do you styill want me to export it? If so, how?
Laptop Windows 8.2 64 bit, IE11; PC Win 8.1, IE11. Both AB Lite 2016 b 2 IE Favorites, IE11 Standards rendering engine.

User avatar
Arandora
Semi-Avantic
Semi-Avantic
Posts: 474
Joined: Sat Aug 09, 2003 10:33 pm
Windows Version: Win 8.1 64 PC/Win 8. 64 laptop
Avant Version: Both AB Lite 2016 v2
Default engine: IE11 Standards
IE Version: IE 11 on PC and laptop
Skin: Aluminium
Location: Poulton-le-Fylde, UK

Re: Windows Security Alert

Post by Arandora » Thu May 07, 2015 5:35 pm

Here's a screen shot of the General details of the Certificate.
Image
Is that enough or do you still want me to export it?
Laptop Windows 8.2 64 bit, IE11; PC Win 8.1, IE11. Both AB Lite 2016 b 2 IE Favorites, IE11 Standards rendering engine.

User avatar
MysteryFCM
Administrator
Administrator
Posts: 7330
Joined: Tue Dec 09, 2003 2:34 am
Windows Version: 10, 8.0, 8.1, 7, Vista, XP
Avant Version: 13.00 Build 23
Default engine: Gecko
IE Version: 7.x, 8.x, 9.x, 10.x, 11.x
Skin: AthenX
Location: Newcastle Upon Tyne, UK
Contact:

Re: Windows Security Alert

Post by MysteryFCM » Thu May 07, 2015 8:03 pm

I'd very strongly advise NOT allowing that one ;)

User avatar
Arandora
Semi-Avantic
Semi-Avantic
Posts: 474
Joined: Sat Aug 09, 2003 10:33 pm
Windows Version: Win 8.1 64 PC/Win 8. 64 laptop
Avant Version: Both AB Lite 2016 v2
Default engine: IE11 Standards
IE Version: IE 11 on PC and laptop
Skin: Aluminium
Location: Poulton-le-Fylde, UK

Re: Windows Security Alert

Post by Arandora » Fri May 08, 2015 12:43 pm

I've deleted the entry from the Certificate Vault and run a deep scan with Malware Bytes whicgh was clear but the pop up still keeps appearing. How do I stop it? If I do a System Restore to about 10 days ago, before this started to happen, will that stop it?
Laptop Windows 8.2 64 bit, IE11; PC Win 8.1, IE11. Both AB Lite 2016 b 2 IE Favorites, IE11 Standards rendering engine.

User avatar
MysteryFCM
Administrator
Administrator
Posts: 7330
Joined: Tue Dec 09, 2003 2:34 am
Windows Version: 10, 8.0, 8.1, 7, Vista, XP
Avant Version: 13.00 Build 23
Default engine: Gecko
IE Version: 7.x, 8.x, 9.x, 10.x, 11.x
Skin: AthenX
Location: Newcastle Upon Tyne, UK
Contact:

Re: Windows Security Alert

Post by MysteryFCM » Fri May 08, 2015 1:33 pm

You can't stop it I'm afraid. Only way to do that is to block the offending domain at the firewall/browser level (I'd recommend blocking *.adsafeprotected.com at the firewall/router level if possible, if not, at the firewall level)

User avatar
Arandora
Semi-Avantic
Semi-Avantic
Posts: 474
Joined: Sat Aug 09, 2003 10:33 pm
Windows Version: Win 8.1 64 PC/Win 8. 64 laptop
Avant Version: Both AB Lite 2016 v2
Default engine: IE11 Standards
IE Version: IE 11 on PC and laptop
Skin: Aluminium
Location: Poulton-le-Fylde, UK

Re: Windows Security Alert

Post by Arandora » Tue May 12, 2015 11:34 am

I added it to Windows Defender Firewall with no effect. However, I noticed that with AB Pop-Up blocker enabled, the alert came up on some sites I use and where there are usually banner adverts there was just the script for the ad showing. When I allowed the security alert to proceed and refreshed, the banner ad showed. So I added the certificate address to the Allowed Sites in the Pop-Up blocker, enabled the Pop-Up Blocker and now the alert does not appear but the banner ad does.
Edit
Spoke too soon! As soon as I launched a new page in a new tab the Security Alert came again!!! :evil: :evil: :evil:
Laptop Windows 8.2 64 bit, IE11; PC Win 8.1, IE11. Both AB Lite 2016 b 2 IE Favorites, IE11 Standards rendering engine.

User avatar
MysteryFCM
Administrator
Administrator
Posts: 7330
Joined: Tue Dec 09, 2003 2:34 am
Windows Version: 10, 8.0, 8.1, 7, Vista, XP
Avant Version: 13.00 Build 23
Default engine: Gecko
IE Version: 7.x, 8.x, 9.x, 10.x, 11.x
Skin: AthenX
Location: Newcastle Upon Tyne, UK
Contact:

Re: Windows Security Alert

Post by MysteryFCM » Tue May 12, 2015 2:34 pm

Windows Defender doesn't actually have a firewall in the traditional sense, so adding it there won't actually block it.

They do however, only use IPs on their AS, so instead, you can add these to the Windows firewall;

23.92.184.0/23
64.94.162.0/24
69.172.216.0/24
70.42.36.0/24
104.244.36.0/22
198.148.15.0/24
199.166.0.0/24

1. Click Start
2. Type: firewall.cpl
3. Click Advanced Settings
4. Click Inbound Rules, and then "New Rule"
5. Click "Custom"
6. Click Next, until you reach the following screen;

Image

7. Under "which remote IP addresses does this rule apply to", click "These IP addresses"
8. Click "Add"
9. Paste each of the above CIDRs into the box and click OK (you'll need to do this for each CIDR one at a time)
10. Once done, click Next
11. Select "Block the connection"
12. Click Next

User avatar
Arandora
Semi-Avantic
Semi-Avantic
Posts: 474
Joined: Sat Aug 09, 2003 10:33 pm
Windows Version: Win 8.1 64 PC/Win 8. 64 laptop
Avant Version: Both AB Lite 2016 v2
Default engine: IE11 Standards
IE Version: IE 11 on PC and laptop
Skin: Aluminium
Location: Poulton-le-Fylde, UK

Re: Windows Security Alert

Post by Arandora » Tue May 12, 2015 2:55 pm

Thanks
Done on my PC. Will do same on my laptop later.
Laptop Windows 8.2 64 bit, IE11; PC Win 8.1, IE11. Both AB Lite 2016 b 2 IE Favorites, IE11 Standards rendering engine.

User avatar
MysteryFCM
Administrator
Administrator
Posts: 7330
Joined: Tue Dec 09, 2003 2:34 am
Windows Version: 10, 8.0, 8.1, 7, Vista, XP
Avant Version: 13.00 Build 23
Default engine: Gecko
IE Version: 7.x, 8.x, 9.x, 10.x, 11.x
Skin: AthenX
Location: Newcastle Upon Tyne, UK
Contact:

Re: Windows Security Alert

Post by MysteryFCM » Tue May 12, 2015 2:59 pm

It remains a pleasure :)

User avatar
Arandora
Semi-Avantic
Semi-Avantic
Posts: 474
Joined: Sat Aug 09, 2003 10:33 pm
Windows Version: Win 8.1 64 PC/Win 8. 64 laptop
Avant Version: Both AB Lite 2016 v2
Default engine: IE11 Standards
IE Version: IE 11 on PC and laptop
Skin: Aluminium
Location: Poulton-le-Fylde, UK

Re: Windows Security Alert

Post by Arandora » Tue May 12, 2015 3:07 pm

The Alert appeared again but I presume I should have rebooted for the rule to take effect which I just have done and so far so good. I presume I remove the entry from the Pop-Up Blocker allowed list?
Laptop Windows 8.2 64 bit, IE11; PC Win 8.1, IE11. Both AB Lite 2016 b 2 IE Favorites, IE11 Standards rendering engine.

User avatar
MysteryFCM
Administrator
Administrator
Posts: 7330
Joined: Tue Dec 09, 2003 2:34 am
Windows Version: 10, 8.0, 8.1, 7, Vista, XP
Avant Version: 13.00 Build 23
Default engine: Gecko
IE Version: 7.x, 8.x, 9.x, 10.x, 11.x
Skin: AthenX
Location: Newcastle Upon Tyne, UK
Contact:

Re: Windows Security Alert

Post by MysteryFCM » Tue May 12, 2015 3:30 pm

You will, yes.

If you do get anymore, make a note of the IP it resolves to (only seen them using their own IPs, but it's possible they're also using others)

User avatar
Arandora
Semi-Avantic
Semi-Avantic
Posts: 474
Joined: Sat Aug 09, 2003 10:33 pm
Windows Version: Win 8.1 64 PC/Win 8. 64 laptop
Avant Version: Both AB Lite 2016 v2
Default engine: IE11 Standards
IE Version: IE 11 on PC and laptop
Skin: Aluminium
Location: Poulton-le-Fylde, UK

Re: Windows Security Alert

Post by Arandora » Tue May 12, 2015 3:40 pm

After rebooting as soon as I loaded AB up popped the Alert! Where do I see the IP it resolves to?
Laptop Windows 8.2 64 bit, IE11; PC Win 8.1, IE11. Both AB Lite 2016 b 2 IE Favorites, IE11 Standards rendering engine.

User avatar
MysteryFCM
Administrator
Administrator
Posts: 7330
Joined: Tue Dec 09, 2003 2:34 am
Windows Version: 10, 8.0, 8.1, 7, Vista, XP
Avant Version: 13.00 Build 23
Default engine: Gecko
IE Version: 7.x, 8.x, 9.x, 10.x, 11.x
Skin: AthenX
Location: Newcastle Upon Tyne, UK
Contact:

Re: Windows Security Alert

Post by MysteryFCM » Tue May 12, 2015 4:19 pm

You can use either Fiddler, or Wireshark (I use both myself);

http://fiddlertool.com
http://wireshark.org

User avatar
Arandora
Semi-Avantic
Semi-Avantic
Posts: 474
Joined: Sat Aug 09, 2003 10:33 pm
Windows Version: Win 8.1 64 PC/Win 8. 64 laptop
Avant Version: Both AB Lite 2016 v2
Default engine: IE11 Standards
IE Version: IE 11 on PC and laptop
Skin: Aluminium
Location: Poulton-le-Fylde, UK

Re: Windows Security Alert

Post by Arandora » Thu May 14, 2015 12:59 pm

I'm afraid I'm out of my depth now. I've downloaded Wireshark but don't understand how to identify the ISP of the offending Security Alert which is still appearing when a new tab is opened, mainly from Email links or from a Bookmarked site or a new page from a link in an existing tab. :problem:
Laptop Windows 8.2 64 bit, IE11; PC Win 8.1, IE11. Both AB Lite 2016 b 2 IE Favorites, IE11 Standards rendering engine.

Post Reply