Forums      
Knowledge Base      
Videos      
Blog      
Terms & Guidelines      
Español
T-Mobile.com | My T-Mobile
 
Reply
I'm new! Be Nice!
Swervo
Posts: 6
Registered: 11-02-2008
0

Google.com being hijacked on my G1

[ Edited ]

I just started having this problem tonight.   Sometimes when I try to go to Google.com on my G1 via a bookmark, the page gets hijacked by what appears to be a fake Microsoft support page saying "Alert: Your computer have been attacked by spyware or viruses!   Please download AntiSpyware to fix.", then with a download link pointing to antispyware.com/index.htm, which seems to go to a Network Solutions placeholder page.

 

I grabbed some screenshots with ddms:

 

Google page coming up wrong on G1

 

The second picture is what comes up if you long-press on the link, the third was supposed to be what comes up if you do Menu -> More -> Page Info, except the debugger doesn't seem to be able to grab the info dialogs.   It says "Microsoft Security Center   Address: http://www.google.com/"

 

So far I've only seen this if I hit the Google bookmark (the one that comes as default on the phone).   If I refresh, I get the google page, then everything's fine for the next few minutes or so.   This is over 3G, not over Wi-Fi.   The only things I've installed recently are upgrades to TuneWiki, Android File Manager, aPlayer, and ConnectBot, and a new install of Tetroid v1.0.3.   Anyone else seeing this?

 

Note: I'm not seeing anything odd in the debugger, just a lot of JPEG parse errors coming from skia, which I believe is the Android graphics engine.

Message Edited by Swervo on 11-23-2008 08:12 PM
I'm new! Be Nice!
brad34471
Posts: 4
Registered: 11-09-2008
0

Re: Google.com being hijacked on my G1

There appears to be something going on...take a look at this posting http://androidcommunity.com/forums/showthread.php?p=85180&posted=1#post85180
 
SiXiam
Posts: 56
Registered: 10-26-2008
0

Re: Google.com being hijacked on my G1

bump.... this is important!!!
 
vivigump
Posts: 676
Registered: 10-27-2008
0

Re: Google.com being hijacked on my G1

Last night I was trying to access Google via my Boomark and I was getting an error, something similar to "404 page does not exist www.google.com/aspx". No problems with with any other bookmark but when I long clicked it to see it, it said www.google.com only; no backslash. I figured it was a glitch and I deleted the old bookmark and made a new one which was fine. Could be related, as it maybe in incomplete hijack attempt.
 
G1Fan2009
Posts: 113
Registered: 10-22-2008
0

Re: Google.com being hijacked on my G1

Everyone that has the problem, should list their installed apps.

We may find the common one.

I don't have the problem, nor do my friends.

I don't think its, epc.t-mobile.com

 

I believe it may be app related.

I'm new! Be Nice!
Swervo
Posts: 6
Registered: 11-02-2008
0

Re: Google.com being hijacked on my G1

Here's the list of apps I've got going right now:

 

AK Notepad
aLastFM Player
Android File Manager
Any Cut
aPlayer
aReader
Bartender
Brain Genius Deluxe (Edit: Forgot this one, shows up as com.glu.android.bgd in settings)
Cinema
Compare Everywhere
ConnectBot
PAC-MAN
Panoramio
Radar
ShopSavvy
Solitaire
Tetroid
TuneWiki
Twisty
WikiMobile

 

I just uninstalled Mobile Invaders and aiMinesweeper (is it just me, or does aiMinesweeper not pick up the onPause event, then just sits there leaking memory in the background?), Neocore, and the MySpace app.

 

Also, I have not had this happen at all today.   I also had it happen on Wi-Fi but before I cleared my cache, once I'd cleared the cache, I didn't see it anymore on Wi-Fi, but I did on 3G.

First Post! Be Nice!
peachymomo
Posts: 1
Registered: 11-24-2008
0

Re: Google.com being hijacked on my G1

I had the same issue the other day. I clicked on the bookmark for yahoo and it directed me to the same thing. I could go to any other page except yahoo. I didn't click on the link because I don't think you can download programs from the internet to the G1 like a regular computer. I cleared my cache, cookies, and browser history and still no luck so I went to menu, more, and downloads and clared that out and it started working again. I only have a few apps downloaded isafe, shopsavy, college football live, solitaire, movies and showtimes, and rings extended the last one downloaded was isafe that morning. I've had no issues since then. It's a little scary, I work for a cell phone company and we deal with viruses and spyware a lot because people download stuff on their phones that they know nothing about. I'm pretty cautious about my phone so it was a shock to me.
 
vivigump
Posts: 676
Registered: 10-27-2008
0

Re: Google.com being hijacked on my G1

Apps installed from oldest to newest:
Ringdroid
Pac-Man
Coloroid
Orienteer
T-Mobile HotSpot Connect
Video Player
Slide Puzzle
Bender
Rings Extended
Any Cut
Bubble
Park Mark
Radar
SkyMap
Shop Saavy
Mem
Divide and Conquer
GMote
The Weather Channel App
AK Notepad
OI Shopping List
Mobile Invaders
OI Voice Notes
Receipt Filer
Toggle Settings
Lunar Phases
Countdown Timer
Tetroid v1.04
Pro Basketball Scores
J2ME MIDP Runner
Cinema
PicSay
apkInstaller
Android Convert
Quickpedia v1.02
WikiMobile
Shell
Superuser
I did update some of my older installed apps with the newest version either the day it happened or the day before. I haven't yet installed any non-market apps although there are some packages that I downloaded still on my SD Card. I did try the J2 Runner without success, it just force closed.



I'm new! Be Nice!
Swervo
Posts: 6
Registered: 11-02-2008
0

Re: Google.com being hijacked on my G1

Just noticed someone on androidcommunity saying they had a similar hijack, only theirs shows them porn when they try to search on ebay.com.

 

It'd be awfully nice if we could get some sort of response about this.

 

 T-Mobile on Twitter   T-Mobile on Facebook    T-Mobile on YouTube