AVG Breaks Google Chrome Security

View Poll Results: Are you using AVG Web Tuneup?

Voters
5. You may not vote on this poll
  • Yes and I love it!

    0 0%
  • Yes, but not anymore.

    0 0%
  • No, and I won't now for sure.

    3 60.00%
  • Never heard of it.

    2 40.00%

  1. Posts : 16,278
    W10Prox64
       #1

    AVG Breaks Google Chrome Security


    This Antivirus Plugin Makes You LESS Secure

    AVG has been a trusted name in anti-malware and online security software for decades; over 200 million people have installed the free AVG Antivirus software. But in the last weeks of 2015, it was revealed that one of AVG’s products (apparently deliberately) bypasses critical security components of the Google Chrome browser for no better reason than to promote AVG.
    The product is a Chrome extension called “AVG Web Tuneup.” The name itself is misleading; the extension doesn’t “tune up” anything, it just checks URLs against a reputation database and blocks connections to known rogue sites. In any case, when AVG Antivirus is installed it urges the user to let it install Web Tuneup as well. About 9 million Chrome users have done so.
    The problem is that AVG doesn’t follow the extension installation process dictated by Google’s developers policy. Google researcher Tavis Ormandy described what happens this way, in a message he posted to a Google security researchers forum.
    "This extension adds numerous JavaScript API's to Chrome, apparently so that they can hijack search settings and the new tab page. The installation process is quite complicated so that they can bypass the chrome malware checks, which specifically tries to stop abuse of the extension API. Anyway, many of the API's are broken."
    Ormandy provided an example of code that could steal authentication cookies from AVG’s Web site, adding that the flawed Web Tuneup “also exposes browsing history and other personal data to the internet” and might very well allow an attacker to execute malware on a user’s machine
    If you have AVG Web Tuneup installed, you may want to uninstall it. Click the three-bars icon in the upper-right corner of Chrome. Cursor down to “More tools” and select “Extensions” from the second drop-down menu. Find Web Tuneup among your extensions and toss it in the trash.
      My Computer


  2. Posts : 111
    Win 10 Pro 64bit (1909)
       #2

    I would never use anything that AVG makes....
      My Computer


  3. Posts : 5,478
    2004
       #3
      My Computer


  4. Posts : 127
    Windows 10 Pro
       #4

    azasadny said:
    I would never use anything that AVG makes....
    Same here, nor Avast. Good AV is not free.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 03:44.
Find Us




Windows 10 Forums