Author Topic: MY safe zone browser hijacked! goes to fake google  (Read 75509 times)

0 Members and 1 Guest are viewing this topic.

Offline Rednose

  • Pirate Party Member
  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 3739
  • Bits of Freedom : https://www.bof.nl
    • Nederlandstalig Avast! forum
Re: MY safe zone browser hijacked! goes to fake google
« Reply #120 on: April 14, 2011, 02:35:30 AM »
Well, the problem was not with Avast! but with Mailshell DNS. But ofcource this shouldn't happen.

Greetz, Red.
OS: Win 10 / iOS 17 / Debian 12 / Tails 5
Real Time: Avast Premium Security
On Demand: Malwarebytes
VPN: NordVPN ( NordLynx ) with Threat Protection ( Lite )

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: MY safe zone browser hijacked! goes to fake google
« Reply #121 on: April 14, 2011, 02:43:23 AM »
Well, the problem was not with Avast! but with Mailshell DNS. But ofcource this shouldn't happen.

Greetz, Red.
I'd like to know if the rest of their partners where also affected or infected which ever way you want to interpret this. :(
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

zeeks

  • Guest
Re: MY safe zone browser hijacked! goes to fake google
« Reply #122 on: April 14, 2011, 03:03:00 AM »
Just got off work, I'm the original poster didn't have a chance to go thru the whole thread. Can anybody bring me up to speed?

Offline scythe944

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2913
    • My Tech Blog
Re: MY safe zone browser hijacked! goes to fake google
« Reply #123 on: April 14, 2011, 03:04:57 AM »
I guess you could read the other pages, but if you're lazy like me, here's a brief synopsis.

Avast uses mailshelldns for their Safe Zone DNS lookups, and apparently mailshell's "military-grade encrypted" DNS service is having some problems and they're trying to figure out what's going on.

For generic computer (not avast) problems, you can also visit my forum for help: http://www.jacobytech.net/forum

Offline Rednose

  • Pirate Party Member
  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 3739
  • Bits of Freedom : https://www.bof.nl
    • Nederlandstalig Avast! forum
Re: MY safe zone browser hijacked! goes to fake google
« Reply #124 on: April 14, 2011, 03:07:07 AM »
Mailshell DNS guys confirmed that they have already fixed the problem:

    We've tracked the problem down to a corrupt DNS cache on one DNS HTTP servers.
    This is why it was seen by some users but not others.  We have disabled the bad server and the DNS HTTP service should now be returning correct data.

    I again apologize for the trouble this has caused your users and we will take steps to ensure this does not happen again

Greetz, Red.
OS: Win 10 / iOS 17 / Debian 12 / Tails 5
Real Time: Avast Premium Security
On Demand: Malwarebytes
VPN: NordVPN ( NordLynx ) with Threat Protection ( Lite )

zeeks

  • Guest
Re: MY safe zone browser hijacked! goes to fake google
« Reply #125 on: April 14, 2011, 03:08:22 AM »
Fashiiiizall Can anybody with some authoratative knowledge tell me if I have to change my 20 passwords. Last night I accessed my e-mail which had over 3,000 messages with sensitive info. I'm only worried about keyloggers?

zeeks

  • Guest
Re: MY safe zone browser hijacked! goes to fake google
« Reply #126 on: April 14, 2011, 03:09:50 AM »
P.s Thanks for the synopsis. (Lazy)me

Offline scythe944

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2913
    • My Tech Blog
Re: MY safe zone browser hijacked! goes to fake google
« Reply #127 on: April 14, 2011, 03:11:34 AM »
meh... I wouldn't be.  Just because you got "shoved" over to a different website than you originally planned, doesn't mean that there were malicious scripts running on the websites that you actually landed on.

I guess there's a good possibility, but if you do a scan on your hard drives with avast and don't find anything, then I'd say there's a good chance that nothing was "harvested" from you.  More of an inconvenience than anything.

Of course, you could always be safe than sorry, so it's up to you if you want to change your 20 passwords or not.
For generic computer (not avast) problems, you can also visit my forum for help: http://www.jacobytech.net/forum

disPlay

  • Guest
Re: MY safe zone browser hijacked! goes to fake google
« Reply #128 on: April 14, 2011, 03:11:45 AM »
If the page was not redirected to a scam site due to DNS poisoning I don't see a problem.

zeeks

  • Guest
Re: MY safe zone browser hijacked! goes to fake google
« Reply #129 on: April 14, 2011, 03:16:29 AM »
Check this out, Last night I was thinking that If I was a hacker I would target avast safezone, make them think it is insecure so they use there regular desktop to access there email and avast tech support, them bam pickup there passwords on keylogger. the perfect way to push you out of safezone to get your info.
Sure enough I had to access my email just to register for this forum!

zeeks

  • Guest
Re: MY safe zone browser hijacked! goes to fake google
« Reply #130 on: April 14, 2011, 03:19:04 AM »
That's hillarious The only reason I bought avast was because just a few weeks ago I Got hit with Google redirect virus and avast was the only thing that picked it up on scan, so I said hey they must be doing something right. That virus was nasty! couldn't get rid of it for nothing. OH WEll back to square one I guess

zeeks

  • Guest
Re: MY safe zone browser hijacked! goes to fake google
« Reply #131 on: April 14, 2011, 03:20:47 AM »
I have to split will check back later for update, Thanks! for all the Help

Offline scythe944

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2913
    • My Tech Blog
Re: MY safe zone browser hijacked! goes to fake google
« Reply #132 on: April 14, 2011, 03:23:44 AM »
That's hillarious The only reason I bought avast was because just a few weeks ago I Got hit with Google redirect virus and avast was the only thing that picked it up on scan, so I said hey they must be doing something right. That virus was nasty! couldn't get rid of it for nothing. OH WEll back to square one I guess

Well, that's where you're wrong.  Whatever was wrong with safezone had nothing to do with a virus, it had everything to do with some screwed up DNS entries that another company controls.  Since this is a new product from avast and probably the first time dealing with mailshell DNS, I'm pretty sure they didn't think that this could ever happen, and their claims that it's the first military-grade secure DNS service lured Avast into using them.

Anyway, it wasn't a virus on your computer, as Avast probably would have picked it up again.  It was a simple DNS problem where your browser thought that the website you were trying to visit existed somewhere else and your computer landed in the wrong place.  It doesn't mean that you or your computer were infected or in danger.
For generic computer (not avast) problems, you can also visit my forum for help: http://www.jacobytech.net/forum

Offline Rednose

  • Pirate Party Member
  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 3739
  • Bits of Freedom : https://www.bof.nl
    • Nederlandstalig Avast! forum
Re: MY safe zone browser hijacked! goes to fake google
« Reply #133 on: April 14, 2011, 03:54:12 AM »
Yep, SafeZone it self is a very good product, but this issue brings up some questions. That said, I am looking forward to it's further development. A little speculation from me : I think that a password manager ( also ) will be added in SafeZone. Btw the keyword here is " also " ;)

Greetz, Red.
« Last Edit: April 14, 2011, 04:00:10 AM by Rednose »
OS: Win 10 / iOS 17 / Debian 12 / Tails 5
Real Time: Avast Premium Security
On Demand: Malwarebytes
VPN: NordVPN ( NordLynx ) with Threat Protection ( Lite )

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: MY safe zone browser hijacked! goes to fake google
« Reply #134 on: April 14, 2011, 04:25:45 AM »
Greetz, Red.
[/quote]
I'd like to know if the rest of their partners where also affected or infected which ever way you want to interpret this. :(

[/quote]

Mailshell DNS guys confirmed that they have already fixed the problem:

    We've tracked the problem down to a corrupt DNS cache on one DNS HTTP servers.
    This is why it was seen by some users but not others.  We have disabled the bad server and the DNS HTTP service should now be returning correct data.

    I again apologize for the trouble this has caused your users and we will take steps to ensure this does not happen again

Greetz, Red.
Well, the problem was not with Avast! but with Mailshell DNS. But ofcource this shouldn't happen.

Was that supposed to answer my question ???

Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet