Do I have a virus?

[chrstrbrts]

Hello,

So, here's my situation:

I started checking HTTPS certificates on random websites just for kicks.

I use Chrome, and checking certificates as you know is very simple.

It just requires a few mouse clicks.

Now, I use an anti-virus program called "Avast Free Antivirus".

This is pretty common free anti-virus software.

What's interesting, though, is that every time I check the certificate path for a site that employs HTTPS, I see that the root certificate authority is "avast! Web/Mail Shield Root".

Even Google.com has avast as it's root issuer.

Now, Google is a huge company, and it seems that it should be issuing its own certificates.

I can't see how a smaller company like avast would have the clout and respect to issue a certificate to a huge company like Google.

So, my layman's theory is that my computer has been compromised by some kind of virus that has tricked my browser into thinking that every server employing HTTPS has been vetted by my anti-virus software and consequently should be communicated with.

What do you more experienced members think?

I think this belongs in Software for Windows -- Programming Moderator Ken g6

 

[AnonymouseUser]

That's your antivirus performing it's own man-in-the-middle attack "for security." So yes, you do have malware, and it's Avast anti-virus.

 

[MustISO]

I use Avast and don't see the issue you're seeing. It may be part of their HTTPS scanning option or some other setting/option you have enabled.

It's part of the HTTPS scanning:

https://blog.avast.com/2015/05/25/explaining-avasts-https-scanning-feature/

 

[lxskllr]

That's your antivirus performing it's own man-in-the-middle attack "for security." So yes, you do have malware, and it's Avast anti-virus.

This. I ran into it on a work machine, and disabled it.

 

[chrstrbrts]

Thanks for the links, guys.

I've decided to uninstall Avast all together.

Do you know of any free anti-virus software that doesn't hijack certificates?

 

[AnonymouseUser]

Technically you can just turn off the HTTPS scanning and keep using Avast. That is, if you still trust Avast.

 

[lightningbaron]

BitDefender, unless you want MS Security Essentials or Windows Defender.

 

[chrstrbrts]

Technically you can just turn off the HTTPS scanning and keep using Avast. That is, if you still trust Avast.

No way.

Not after what I've read.

Screw those people.

BitDefender, unless you want MS Security Essentials or Windows Defender.

I've read that BitDefender corrupts the certificate path also.