Author Topic: MY safe zone browser hijacked! goes to fake google  (Read 62608 times)

0 Members and 1 Guest are viewing this topic.

Offline dagrev

  • Poster
  • *
  • Posts: 424
Re: MY safe zone browser hijacked! goes to fake google
« Reply #150 on: April 14, 2011, 01:32:17 PM »
I'm glad Vlk posted and I'm sure avast will do what they can to keep users safe.  It serves them only if things like this do not happen, so I imagine they are as hot about this as us users who were at risk.  We may have had personal info stolen and they may lose market share and credibility over this kind of thing (though it was a 3rd party that was the actual source). 

I'd like to hear from Mailshell on this.  Do they know if personal info has been taken or was it just a redirection with not much else involved.  I think we all should hear from mailshell on this.  Maybe we should email them directly, I don't know. 

I still have great confidence in the avast team and the program (but likely won't be using SZ for a while--a sandboxed FF and Trusteer for me).  It's clearly in there best interest to get good answers to this as the perception of protection is also important in seeking to grow security company.

Nevertheless, I'm glad I have LifeLock!
Toshiba P870 Intel i7 2.30 GHz, 8GB Ram / Win7 (x64) SP1 | AIS 8 | MBAM Pro | AX64 Time Machine | Acronis TI | iDrive (free) | Pale Moon Browser
Naturalism postulates a non-rational source for man’s rationality. (K.Samples)
Would any one trust in the convictions of a monkey’s mind...? (Darwin)

Offline DraKuL

  • Sr. Member
  • ****
  • Posts: 394
Re: MY safe zone browser hijacked! goes to fake google
« Reply #151 on: April 14, 2011, 01:41:11 PM »
I'm glad Vlk posted and I'm sure avast will do what they can to keep users safe.  It serves them only if things like this do not happen, so I imagine they are as hot about this as us users who were at risk.  We may have had personal info stolen and they may lose market share and credibility over this kind of thing (though it was a 3rd party that was the actual source). 

I'd like to hear from Mailshell on this.  Do they know if personal info has been taken or was it just a redirection with not much else involved.  I think we all should hear from mailshell on this.  Maybe we should email them directly, I don't know. 

I still have great confidence in the avast team and the program (but likely won't be using SZ for a while--a sandboxed FF and Trusteer for me).  It's clearly in there best interest to get good answers to this as the perception of protection is also important in seeking to grow security company.


Totally agree,hope they will findout more info and get back to us. As for MailShell, they still havent said anything else other than that short message have they?  :-\

Even I have great confidence in the team, the program and the SZ too but they have to do something about the DNS (I'm sure everyone whose aware of what happened will stay off SZ for a while  ;D ) but the idea of an isolated desktop + browser is amazing.. if only there is a way to secure the connection as well..

Its hard to trust MailShell again  :-\ its not at all secure as they claim it to be.. and their fault caused a lot of damage to Avast..
ASUS ROG Mobo - AMD Ryzen 7 3700X| RAM 32.00GB | 4TB HDD +1TB SSD | ATI Radeon RX 5700 XT 8GB
Windows 10 Pro 64bit |Avast One Individual | MBAM PRO - RealTime | SUPERAntiSpyware PRO |CC Cleaner | Chrome | Firefox |(The Latest Release of all the Software)

Offline Zyndstoff (aka Steven Gail)

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2610
  • I can resist anything except temptation.
    • tex62
Re: MY safe zone browser hijacked! goes to fake google
« Reply #152 on: April 14, 2011, 01:53:46 PM »
Now all slow down a bit.

The first word from Vlk was: it was not a triggered attack or a hack.

So calm down and wait for deeper explanation. There are many reasons for anything getting corrupted, beginning with hardware failure etc. etc...

When you all say "I trust Avast", well then trust in Vlk as well. Don't blow this up more than neccessary. It was communicated that nothing harmful happened and that we should believe for now.
7 x64 SP1, FF 8a Aurora, TB6, 6.0.1203 Free
Free MBAM Clear

Offline DraKuL

  • Sr. Member
  • ****
  • Posts: 394
Re: MY safe zone browser hijacked! goes to fake google
« Reply #153 on: April 14, 2011, 02:00:48 PM »

So calm down and wait for deeper explanation. There are many reasons for anything getting corrupted, beginning with hardware failure etc. etc...

When you all say "I trust Avast", well then trust in Vlk as well. Don't blow this up more than neccessary.

yeah yeah I just said that I want to hear more about it, and want to hear what MailShell admins/developers have to say as well.. Also as Bob says is Avast the only partner that got affected and if so, why ?

Also I there were redirects to completely fake sites that had various links to what we can assume - "other malicious sites"..

I totally trust in Vlk  8) hope he will findout more and get back soon.. Just curious about this...
ASUS ROG Mobo - AMD Ryzen 7 3700X| RAM 32.00GB | 4TB HDD +1TB SSD | ATI Radeon RX 5700 XT 8GB
Windows 10 Pro 64bit |Avast One Individual | MBAM PRO - RealTime | SUPERAntiSpyware PRO |CC Cleaner | Chrome | Firefox |(The Latest Release of all the Software)

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11664
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: MY safe zone browser hijacked! goes to fake google
« Reply #154 on: April 14, 2011, 02:10:43 PM »
Give me a few hours guys, I have a bunch of meetings today... I will get back to you asap on this.
If at first you don't succeed, then skydiving's not for you.

Offline logos

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 9441
Re: MY safe zone browser hijacked! goes to fake google
« Reply #155 on: April 14, 2011, 02:11:06 PM »
Now all slow down a bit.
I haven't seen any hard flaming or anger in the thread so far

The first word from Vlk was: it was not a triggered attack or a hack.
So calm down and wait for deeper explanation.
still waiting... agree this could take a while, if it ever happens ( ??? )


There are many reasons for anything getting corrupted, beginning with hardware failure etc. etc...
sure, a hardware failure leading to porn/gambling etc... ads, that's very common ;D ... most likely HDD magnetic zones interfering unexpectedly at server level ??? ... hmm... what's in "etc... etc"... ?

When you all say "I trust Avast", well then trust in Vlk as well. Don't blow this up more than neccessary. It was communicated that nothing harmful happened and that we should believe for now.
the fact that many here has been trusting Avast so far doesn't give a green light to anyone from Avast, and certainly doesn't imply that someone - or anyone - from Avast should be blindly trusted.
« Last Edit: April 14, 2011, 02:14:34 PM by Logos »
w7 - ais7

Offline logos

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 9441
Re: MY safe zone browser hijacked! goes to fake google
« Reply #156 on: April 14, 2011, 02:11:27 PM »
Give me a few hours guys, I have a bunch of meetings today... I will get back to you asap on this.

okay...
« Last Edit: April 14, 2011, 02:13:49 PM by Logos »
w7 - ais7

Offline Zyndstoff (aka Steven Gail)

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2610
  • I can resist anything except temptation.
    • tex62
Re: MY safe zone browser hijacked! goes to fake google
« Reply #157 on: April 14, 2011, 02:14:28 PM »

still waiting... agree this could take a while, and most likely never happen

Give me a few hours guys, I have a bunch of meetings today... I will get back to you asap on this.
... most likely HDD magnetic zones interfering unexpectedly at server level ???


Exactly.  8)
7 x64 SP1, FF 8a Aurora, TB6, 6.0.1203 Free
Free MBAM Clear

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 46009
  • 61 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: MY safe zone browser hijacked! goes to fake google
« Reply #158 on: April 14, 2011, 04:45:58 PM »

still waiting... agree this could take a while, and most likely never happen

Give me a few hours guys, I have a bunch of meetings today... I will get back to you asap on this.
... most likely HDD magnetic zones interfering unexpectedly at server level ???


Exactly.  8)

Zyndstoff,
Since when is asking a question and expecting an answer considered an attack ???
And yes, I would still like an answer to my question but will wait till someone is able to give me that answer.
Remember, I'll be asked for an explanation for this and the last VPS update problem sometime during one of the seminars. It's always nice to have an answer before the question is asked and very embarrassing to not have an answer on a vital issue.
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v21H2 64bit, 16 Gig Ram, 1TB SSD, AvastOmni 21.6, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline Zyndstoff (aka Steven Gail)

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2610
  • I can resist anything except temptation.
    • tex62
Re: MY safe zone browser hijacked! goes to fake google
« Reply #159 on: April 14, 2011, 04:55:36 PM »

still waiting... agree this could take a while, and most likely never happen

Give me a few hours guys, I have a bunch of meetings today... I will get back to you asap on this.
... most likely HDD magnetic zones interfering unexpectedly at server level ???


Exactly.  8)

Zyndstoff,
Since when is asking a question and expecting an answer considered an attack ???
And yes, I would still like an answer to my question but will wait till someone is able to give me that answer.
Remember, I'll be asked for an explanation for this and the last VPS update problem sometime during one of the seminars. It's always nice to have an answer before the question is asked and very embarrassing to not have an answer on a vital issue.

Bob, I'm sorry, I think I made myself misunderstood.
I did not intend to call anything an attack, what I was trying to express (poorly, as I know see) was that we should calm down in terms of making up rumors about what happened and who or what else was affected but instead wait rather patiently for the already announced explanation from Avast.
Sorry if I found only the wrong words.  ::)
« Last Edit: April 14, 2011, 04:57:17 PM by Zyndstoff »
7 x64 SP1, FF 8a Aurora, TB6, 6.0.1203 Free
Free MBAM Clear

Offline logos

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 9441
Re: MY safe zone browser hijacked! goes to fake google
« Reply #160 on: April 14, 2011, 05:13:12 PM »
thing is everybody's quite calm here ;D .. in this thread at least. There hasn't been any report of hijacked bank account or anything along the lines, explaining this calm :)
w7 - ais7

Offline Zyndstoff (aka Steven Gail)

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2610
  • I can resist anything except temptation.
    • tex62
Re: MY safe zone browser hijacked! goes to fake google
« Reply #161 on: April 14, 2011, 05:14:53 PM »
thing is everybody's quite calm here ;D .. in this thread at least. There hasn't been any report of hijacked bank account or anything along the lines, explaining this calm :)

Takes more than 1 day for the money-transfers to be completed...  ;D
7 x64 SP1, FF 8a Aurora, TB6, 6.0.1203 Free
Free MBAM Clear

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 71894
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: MY safe zone browser hijacked! goes to fake google
« Reply #162 on: April 14, 2011, 05:37:04 PM »
thing is everybody's quite calm here ;D .. in this thread at least. There hasn't been any report of hijacked bank account or anything along the lines, explaining this calm :)

Takes more than 1 day for the money-transfers to be completed...  ;D

Uh.. Hope not..!! :-\
Win 8.1 [x64] - Avast PremSec 21.9.6605.IBC [UI.666] - EEK - Firefox ESR 78.14 [NS/uBO/PB] - TB 91.1.2
Avast-Tools: Secure Browser 94.0 - Cleanup 21.3 - SecureLine 5.13 - Driver Updater 21.3 - CCleaner 5.85
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline street_lethal

  • Full Member
  • ***
  • Posts: 177
Re: MY safe zone browser hijacked! goes to fake google
« Reply #163 on: April 14, 2011, 06:28:22 PM »
Well earlier it was reproducable, 5 out of 10 times I was redirected.. but not anymore.. I played around with the 2 dll files - swapping them but still couldnt reproduce it..

EDIT: there was an avast update a few minutes ago, after that, the issue is back..



That's not good. This happening a few days after the bogus update incident doesn't bolster people's confidence in Avast. Being a security conscience person it makes me speculate if the update servers were compromised as well. It's probably all unrelated but a bunch of unfortunate coincidences strung together looks bad either way.




oh just a corrupt cache? ;D  http://en.wikipedia.org/wiki/DNS_cache_poisoning

what was the nature of the corruption?

Corrupt cache sending you to fake sites. Sounds like poisoning to me but that's just an assumption.

Also, what is getting old is forum members telling the Avast developers there's an issue with their product/service and getting a sometimes very delayed response. I understand a team of developers can't catch everything but stuff like this should be heavily monitored. Especially when it's part of a product that's supposed to increase security. It doesn't look good in my opinion. The end user shouldn't have to come on here and troubleshoot something like this, that's what paid employees are for.

My hat is off to the senior members here who volunteer their time to support users.
« Last Edit: April 14, 2011, 06:39:46 PM by street_lethal »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 71894
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: MY safe zone browser hijacked! goes to fake google
« Reply #164 on: April 14, 2011, 06:34:19 PM »
1. Being a security conscience person it makes me speculate if the update servers were compromised as well.
2. My hat is off to the senior members here who volunteer their time to support users.

1. Not in any way related to this issue...! ;)
2. Big +1 from me, especially to Drakul..!! :)
asyn
Win 8.1 [x64] - Avast PremSec 21.9.6605.IBC [UI.666] - EEK - Firefox ESR 78.14 [NS/uBO/PB] - TB 91.1.2
Avast-Tools: Secure Browser 94.0 - Cleanup 21.3 - SecureLine 5.13 - Driver Updater 21.3 - CCleaner 5.85
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0