MY safe zone browser hijacked! goes to fake google

thing is I’m not getting any redirection here… but okay, since you’re the second poster to mention the issue, this has to be taken seriously I guess…

Anything related to the FP desaster? Hard to imagine though…

Maybe do a repair installation and check again?

Theres no redirection I think (atleast not visible) It says that its google.com but as you can see in the images it doesnt look like it… and there are so many ads visible as well! So I’m pretty sure its not google and also I cant access the homepage (the default homepage which is Avsast safezone )

I’m certain that this was fine a few days ago… The last time I accessed safeZone it was working fine… Not sure if it has to do something with the update but if thats the case shouldnt you guys get it too ?

PS - did you see the pics I uploaded? do you think its a fake google site?

I’m not using AIS / PRO, thus no safezone.

The site on the pics is somewhat odd.

Did you browse through all your Avast settings and search for uncommon entries?

Ok I tried to goto Yahoo, Youtube, Bing - ALL of these take me to fake sites, no images, its actually the same site for Yahoo and Bing, and another site for Youtube… For these sites I entered the full address, not just the name “yahoo”…

I tried searching for “facebook” by typing it on the address bar, it said URL not found… But when I enter facebook.com it takes me to a site that seems like facebook ( not sure if its the real one or not but seems real)

Please get someone to look into this as I’m really worried because I just did some online banking a few hours ago!

there’s some hacking going on definitely (yes I saw your pics)… can’t tell at what level it happens. Will have to wait until someone from Avast comes here…

edit: unrelated, I just attempted to clear private data in my SZ browser and that crashed it.

What do you mean uncommon entries?

Now THAT would be a real catastrophe for Avast…

Entries you have never seen before, entries that changed without reason, entries that you did not make… such things.

@DraKuL please wait until you clean your SZ browser (private data) or reset the safe zone, as I’m pretty sure that your current data will be needed to investigate.

I’m dazzeled about the fact that no Mod or Dev has turned to this thread up to now… :o

I emailed Vlk a few minutes ago…

I reset it a several times before reading your post… Still get the same result though… by the way I took more pics of Yahoo, youtube and what happens when I search facebook on the address bar… When I access Bing.com I get the same result as Yahoo but the name is changed to Bing…

http://www.sendspace.com/file/9m78mu

http://www.sendspace.com/file/ese83y

http://www.sendspace.com/file/xrgiwt

Sorry, but me too…!! :frowning:
Somebody should look at it, asap…!!!
Thanks,
asyn

Ok now its back to normal ??? ??? I reset it earlier and tried - got the same result… but now it worked :-\ which is good for me but doesnt seem to help with detecting what went wrong

1000% a problem with the secured DNS at Avast.
Which is not good at all.

Hoping for an explanation - soon.

jesus ;D … guys I’m not sure if it will intercept the SZ browser traffic, but could try installing fiddler2 and see what you get in the log when you run SZ chromium, then if you got anything save the log and upload it here…

http://www.fiddler2.com/fiddler2/version.asp

edit: yes it works

Yeah seems to me also that someone has been messing around with that…

By the way Logos didnt you experience this problem ? You also have AIS right ?

OK, I checked and I’m also having this problem. I used it a few days ago and it was fine. Did some banking so I sure hope I didn’t send personal info to hackers which is now all around the world.

One other thing is that SZ is a little dim and not as bright as normal.

I noticed a pretty big difference between “now” and “then”… Earlier the browser did not load automatically - I had to click the icon and wait for about 10seconds for it to pop up, and now it loads immediately, and as soon as I access the SZ the browser pops up…