Webroot Filtering Extension

[proton777]

Hi. I couldn't find my problem in previous posts.

My AV is Webroot Secure Anywhere. I recently manually added Webroot Filtering Extension to Palemoon. Since then, when using PM and clicking HOME (set for about:blank), I get a warning from Webroot stating:

Warning: This is a High Risk Site
Webroot has blocked the website you are trying to access for your protection:
https://www.superfish.com/ws/sf_conduit.jsp?dlsource=converter
Detected Unsafe Site
We have found this website to contain malware or other security risks.

If I change my home page to about:home, all is fine.

On FF, about:blank loads a blank page and is fine.

On PM, various other web pages display the block warning when there is an embedded third-party ad in separate frames. So, the page loads but the embedded frames show the warning and do not load. For example, this page show will load normally, but THREE frames embedded within it are blocked by Webroot.

http://www.dailymail.co.uk/news/us_presidential_election_2016/index.html

FF is fine.

Another page on PM that loads, but Webroot blocks a frame(s). Again, fine on FF.

http://www.netdania.com/Products/live-streaming-currency-exchange-rates/real-time-forex-charts/FinanceChart.aspx?m=c

While Lenovo laptops (my brand) have shipped in the past with this SUPERFISH program installed (on 2014 and 2015 models), my 2018 model should be clean. Lenovo offers a Superfish removal tool but the tool found my machine to be clean.

Other research lead me to manual removal of certificates within Windows and each individual web browser. My OS and all browsers are free of Superfish certificates..

In Windows, under ADD/REMOVE programs, there is no Superfish there, nor any programs that Superish is associated with.

After filing a ticket with Webroot tech support, I sent them my machine logs and they would only tell me they don't support Palemoon, and couldn't help me.

I ran HijackThis and nothing obvious is there. My Host file is as expected.

I did find two Superfish entries in REGEDIT and deleted them, rebooted, and nothing changed.

Any thoughts? False positive? Remove the Webroot Filtering Extension? The fact that there is still a http://www.superfish.com URL that I seem to be directed to worries me.

Thanks for any help

[ron_1]

Having your AV filter your browsing connections is a very BAD idea. The reason is somewhere here on the forum, do a search.

EDIT
Found one, link below. It references Avast, but it doesn't matter which AV is filtering, it's all bad.

https://forum.palemoon.org/viewtopic.php?f=3&t=6319&p=41506#p41491

[proton777]

Hey, thanks for the reply and leg work, helloimusthbegoing.

I read the link and that all makes sense and I'm willing to accept the explanation, but I'm still bothered by the fact that something, somewhere is pointing me to www.superfish.com.

If I were not able to access certain pages or had generic errors/warnings, etc. from my AV, I would shut it off Web Filtering, but this apparent attempted re-direct makes me worried.

[ron_1]

proton777 wrote:
Hey, thanks for the reply and leg work, helloimusthbegoing.

No problem. I wish I could answer the rest of your problem about superfish. Hopefully one of the gurus here can help you.

[Moonchild]

viewtopic.php?f=24&t=14122