AVG Version 8 Antivirus software loading web sites badly.

I uninstalled that bloatware and went back to version 7.5...

Bob

On Thu, 10 Jul 2008 15:44:39 +1000, Bob Parker put finger to keyboard and composed:

This is currently the biggest security issue affecting the entire Internet:

"An attacker with the ability to conduct a successful cache poisoning attack can cause a nameserver's clients to contact the incorrect, and possibly malicious, hosts for particular services. Consequently, web traffic, email, and other important network data can be redirected to systems under the attacker's control."

Just about everyone is working on a fix.

To find out if the DNS server you use is vulnerable, click the "Check My DNS" button at this URL:

- Franc Zabkar

Heard similar elsewhere.

Have not upgraded from V7.5 and the updates are still coming in so far (so they must have a clue all is not well). If it's not fixed I will also jump ship. Avast seems to be well rated AIUI.

Graham

Fascinating but way over my head. Can you simplifiy that somehow ?

Thanks, Graham

On Thu, 10 Jul 2008 07:17:39 +0100, Eeyore put finger to keyboard and composed:

It's over my head, too, but my understanding is that the whole DNS system for the Internet is now vulnerable to "phishing" attacks.

See

"Attackers could use the vulnerability to route internet users wherever they wanted no matter what website address was typed into a web browser."

- Franc Zabkar

I see.

So now maybe we have to select secure DNS servers ? Or is it even worse than that ?

Graham

that ?

DJBDNS was always safe, but the error is in the *protocol*, and relies on attacker predicting the next TXID. In most DNS servers that wasn't hard. The only safe server is one that either was running safe software (few, safe because they randomised the TXID) or has been patched.

Make sure you install the required patches.

Its free, if you dont like it go pay for norton.

I am paying for it.

You HAVE to be joking ! Biggest POS ever. Or is that MacAfee ?

Graham

On Thu, 10 Jul 2008 07:17:39 +0100, Eeyore put finger to keyboard and composed:

I found the following explanation helpful:

- Franc Zabkar

I removed AVG V8 and reloaded it without the website scanner. Now my DL/UL speeds are back to normal.

Why not just disable the scanner from within the AVG program?

My point exactly. AVG is free and its good

How tricky is it to spot the option ? I'm sure this must be where my neighbour went wrong.

Eventually he lost ALL IP connectivity.

Graham

Lol, that would be common sense. But lest just whinge about a free program, thats more fun.