Cannot upgrade as blocked by BitDefender antivirus

10 posts, 0 answers
  1. Thierry
    Thierry avatar
    8 posts
    Member since:
    Aug 2013

    Posted 15 Jul Link to this post

    Hi,

    Has anyone get any ideas why Bitdefender would be reporting that Fiddler is trying to access a dangerous page?

     

    Infected web resource detected
    now
    Feature:
    Online Threat Prevention
    We blocked this dangerous page for your protection: http://telerik-fiddler.s3.amazonaws.com/fiddler/FiddlerSetup.exe Accessed by: Fiddler.exe Dangerous pages attempt to install software that can harm the device, gather personal information or operate without your consent.

     

    Is it just that it's trying to access an .exe?

     

    Thanks

    Thierry

  2. Chris
    Chris avatar
    5 posts
    Member since:
    May 2014

    Posted 17 Jul in reply to Thierry Link to this post

    I'm getting the same, but have been successfully updating previously (i.e. it's not just because it's an exe)

    Perhaps it has been flagged by someone as dangerous?

  3. Chris
    Chris avatar
    5 posts
    Member since:
    May 2014

    Posted 17 Jul in reply to Chris Link to this post

    I've submitted the URL to BitDefender as a false positive so they can investigate
  4. Thierry
    Thierry avatar
    8 posts
    Member since:
    Aug 2013

    Posted 17 Jul in reply to Chris Link to this post

    Thanks for the update and reporting it to BD.
  5. Chris
    Chris avatar
    5 posts
    Member since:
    May 2014

    Posted 17 Jul in reply to Thierry Link to this post

    No problem.

    Apparently it takes 72 hours to go through the automated test environment to confirm it’s clean and is rolled out as a BD signature update, so update BD after Friday and then hopefully it should come down

  6. Eric R | Technical Support Engineer
    Admin
    Eric R | Technical Support Engineer avatar
    230 posts

    Posted 18 Jul Link to this post

    Hi Chris,

    Thank you for submitting this to the BitDefender team. I also believe it is false positive as I tested the provided link and was able to download it without any issues. Another option to try is BitDefender's Exception List.

    Since BitDefender is testing it now, please keep us posted here on the outcome. Let me know if you have any other questions. Thanks again!

    Regards,

    Eric R
    Progress Telerik
    Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Feedback Portal and vote to affect the priority of the items
  7. Chris
    Chris avatar
    5 posts
    Member since:
    May 2014

    Posted 18 Jul in reply to Eric R | Technical Support Engineer Link to this post

    Hi Eric

    No problem. I actually compared the URL to the manual download URL and it's identical, and BitDefender does allow that to be downloaded (so Thierry - try downloading it manually instead if you need it sooner)

    I think the problem may be the download of an executable being initiated from Fiddler, in which case BitDefender may whitelist the URL just to find it's already considered safe and so ignore the request, but still block Fiddler from download it

    We'll have to see

  8. Chris
    Chris avatar
    5 posts
    Member since:
    May 2014

    Posted 18 Jul in reply to Chris Link to this post

    Hi again

    I did just notice there is one difference in the URLs, and BitDefender doesn't like the one that Fiddler uses:

    Fiddler attempts to download using this URL: http://telerik-fiddler.s3.amazonaws.com/fiddler/FiddlerSetup.exe

    The manual download location is this https://telerik-fiddler.s3.amazonaws.com/fiddler/FiddlerSetup.exe

    (i.e. manually it is over https, but Fiddler is going over http)

    If I try to download using http, even manually, BitDefender blocks it, but it's happy with the https version.

    Could you please let the Fiddler developers know so future updates use the https URL? It would be safer anyway, and was probably switched for a reason anyway, so it would complete that switch

    Thanks!

  9. Eric R | Technical Support Engineer
    Admin
    Eric R | Technical Support Engineer avatar
    230 posts

    Posted 19 Jul Link to this post

    Hi Chris,

    Not a problem. I created a new issue for this. Keep an eye out for it in the Release Notes.

    Please let me know if you have any additional questions. Thanks again for your help with this isolating this.

    Regards,

    Eric R
    Progress Telerik
    Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Feedback Portal and vote to affect the priority of the items
  10. Thierry
    Thierry avatar
    8 posts
    Member since:
    Aug 2013

    Posted 19 Jul Link to this post

    Thank you for following this up so well and for all the updates.

    I will try to download it directly this evening.

    Again, much appreciated

    T.
Back to Top