Godaddy Cpanel is being blocked by Web Antivirus.

[micsermaster]

I’m using Chrome and normally can go to all pages of Godaddy to manage my domains. I’m using Kaspersky Internet Security. 

I can log into Godaddy and view many areas, but cannot go to Cpanel unless I pause Kaspersky. I’m not sure what the problem is. 

The message reads: 

Blocked by Web Anti-Virus

Reason: threat of data loss

Detection method: Cloud Protection

Any ideas on how to resolve this? 

[Flood and Flood's wife]

Hello @micsermaster, 

Welcome!

1. Which KIS version & patch(x) → on Windows Taskbar, select Kaspersky icon, select About? 
2. Open KIS, select More Tools, select Reports, change timeframe to Day or Week, select Web Anti-Virus, find the detections, Save the report, attach📎 to your reply please? 
3. Does the GoDaddy/Cpanel issue happen in every supported browser: Chrome, Firefox, Edge Chromium? 

Thank you🙏

Flood🐳+🐋

[Igor Kurzin]

Hi @micsermaster , 

Is the issue still actual? If yes, please submit a ticket to technical support via my.kaspersky.com and collect traces (here is how to collect traces: https://support.kaspersky.com/common/diagnostics/12797):

• enable traces
• try to open the Cpanel to trigger the Web Anti-Virus detect
• stop traces
• share the tracelogs via some cloud and include the link to download in your request to technical support

Let me know the incident number. 

[micsermaster]

I will check in the morning and inform.

[micsermaster]

@Flood and Flood's wife 21.1.15.500 . Yes it happens in every browser. 

 

@Igor Kurzin here is the incident number: INC000012454464

[Flood and Flood's wife]

v21.1.15.500 .

Hello @micsermaster, 

Thank you for updating us👌

• ❓ Please post a full screen image of Godaddy Cpanel blocked? 
• ❗ KIS is up to version 21.2.16.590(b), please update, follow the steps below & monitor the issue:

To update please follow these steps:

1. Create a System restore point.
2. Check system for any software conflicts?
3. Uninstall KTS, save License information only
4. Download new KIS installer
5. Install KIS
6. After rebooting, make sure KIS is started?
7. Run a manual Database update → allow it to complete.
8. Shutdown computer, using Shutdown, not Restart, power on, login.
9. Make sure KIS is started, check patch(b) has been applied? 
10. Run a Full scan, allow it to complete.
11. Monitor the “Godaddy Cpanel is being blocked by Web Antivirus” issue? If it persists please do the next two steps:
12. 🅰As a test only, shutdown/exit the browser, in KIS, uncheck Inject script into web traffic to interact with web pages -→ image 1, start the browser, are you able to download Google Drive files? 
13. 🅱As a test only, shutdown/exit the browser, in KIS, Encrypted connections scan, Scan encrypted connections upon request from protection components, ADD Godaddy  exclusion(s) = Active → image 2, start the browser, are you able to access Cpanel? 

    If Cpanel has a specific domain, add it

     

• Please let us know the outcome? 

Thank you🙏

Flood🐳+🐋

[micsermaster]

@Flood and Flood's wife Thank you. I will work on this. In the meantime here is the image of the webpage error. 

 

[Flood and Flood's wife]

Hello @micsermaster, 

You’re most welcome☺ !

1. Is the p3pl etc URL, in the image you posted, from GoDaddy Cpanel ? 
2. Go to KIS Reports, find the Access denied events, save the Report, attach📎 to your reply please? 

Thank you🙏

Flood🐳+🐋

[micsermaster]

Hi @Flood and Flood's wife , please find the attached report. 

Yes, that is the URL that I get when I click on the Cpanel icon. A second window opens and then it is blocked. 

[Igor Kurzin]

Hi @micsermaster , 

On it, please stand by.

[nihitthakkar]

Hi

Godaddy Cpanel easily manages many aspects of account, including the files, applications, and email hosted on server. CPanel is used in conjunction with WebHost Manager, or WHM. cPanel is available on Linux-based hosting accounts and servers.
 

[nihitthakkar]

Godaddy Cpanel easily manages many aspects of account, including the files, applications, and email hosted on server. CPanel is used in conjunction with WebHost Manager, or WHM.
 

[Igor Kurzin]

Hi @micsermaster , Anti-Virus Lab experts confirmed a false positive, a fix will be released promptly. Sorry for the trouble. 

[micsermaster]

That is unfortunate and very disappointing. I guess I’ll have to disable the software and use something else as I can’t do my work.

[Flood and Flood's wife]

Hello @micsermaster, 

@Igor Kurzin has advised the detections are false positives & will be fixed. 

Have you run a manual Database update & shutdown the machine using Shutdown, not Restart, powered on, logged in & rechecked the detections? 

Please let us know? 

Thank you🙏

Flood🐳+🐋

[Igor Kurzin]

Hi @micsermaster , 

The issue still occurs? If yes, please reply to INC000012454464, we will get it back to Anti-Virus Lab analysts. 

[micsermaster]

Hi @Igor Kurzin ,

 

The problem appears to have been resolved. Thanks for following up. 

[Igor Kurzin]

Hi @micsermaster , 

thanks for letting us know. Have a great day!