AVG Security - Injecting code into your webpages?

SkyForumPremium

3790 posts

I was working on one of my sites today when I found this injected right after the <head> tag

<head><script src="/A2EB891D63C8/avg_ls_dom.js" type="text/javascript"></script>
I thought I had been hacked but recognized the AVG moniker as one I use for my own personal computers.

If you have AVG free installed on your com and you use that com to edit your server files, it will inject this code. It's supposedly being done as a protection device from opening dangerous web pages but the code itself can cause the webpage to fail.

Here's some more info.

http://www.roslindesign.com/2010/10/12/avg-antivirus-2011-corrupting-web-pages-with-injection-of-script-avg_ls_dom-js/

Obviously, AVG just lost me. What the hell were they thinking? Well, at least I can thank them for pointing out another way to get to my server files. Friggin nitwits.

http://towtalk.net ... Hosted by Zarconia.net!

Quote · 10 Jun 2012

newton27Premium

7526 posts

I use AVG as well but disabled the page shield long ago, I have been going through my sites and cannot find that.

What file did you find it in?

[edit] I read a little further..

A few days ago, I checked my blog’s HTML code and found out a serious issue. My website was injected with the script avg_ls_dom.js and I was very worried that my site could have been hacked. However, when I viewed source of some other sites, I also saw the script appear. There is no way this is a mass attack because I checked very popular websites and all of them are injected with the script also. I started to think that this is my computer’s problem and I was right.

This is actually a serious bug of the popular anti-virus program AVG 2011.

taken from: http://techwalls.com/news/websites-injected-script-avg-ls-dom-js/

So it's not injecting the actual line on your "server," it puts it on every site you view.

ManOfTeal.COM a Proud UNA site, six years running strong!

Quote · 10 Jun 2012

SkyForumPremium

3790 posts

I found it in an html form page that I have on one of my sites. (non dolphin). I have not had a chance to go through all my pages yet on all my sites. I use the same com to do all my work so I suspect I'll find it again.

I was never aware this existed until I happened across the code today making a small edit to the page. A quick Google and boom, there it was.

One of the other issues I have with the free version of AVG is their popup advertising has just gotten ridiculous. i close popup ads at least a dozen times a day. I understand the need for a little advertising in lieu of free but it's just gotten out of hand. That window will popup over anything, including whatever video I may be watching at the time.

http://towtalk.net ... Hosted by Zarconia.net!

Quote · 11 Jun 2012

SkyForumPremium

3790 posts

I use AVG as well but disabled the page shield long ago, I have been going through my sites and cannot find that.

What file did you find it in?

[edit] I read a little further..

This is actually a serious bug of the popular anti-virus program AVG 2011.

taken from: http://techwalls.com/news/websites-injected-script-avg-ls-dom-js/

So it's not injecting the actual line on your "server," it puts it on every site you view.

NO! It's actually adding it to pages that I am editing on my com. I open the page in the cpanel editor (on my com) and do my work using their editor, then save the file. It actually places the code during that process.

http://towtalk.net ... Hosted by Zarconia.net!

Quote · 11 Jun 2012

Steve The ExploiterAdvanced

300 posts

Hmm... Never noticed that before since I don't run windows on any of my coding or production machines.

I realized the other day when my mother in law came over, I hadn't sat in front of a windows computer in 6 months. lol

Next time she brings her laptop over here, I'll do a view source code and see if I can see it on any of the pages she views.

Thanks for the info!

http://www.mytikibar.com

Quote · 11 Jun 2012

Reply ›

AVG Security - Injecting code into your webpages?

Blogs

Help

Product

Company