UC Browser AdGuard Kill Injection

Discussion in 'Discussion (Beta Versions)' started by rjm831, Jul 30, 2017.

  1. rjm831

    rjm831 New Member

    Joined:
    Jul 25, 2017
    Messages:
    5
    I rarely use my data plan, but today I did: enabled Adguard, turned data on. Almost immediately Adguard became disabled. This was logged:
    UC Browser
    injections.adguard.com:443
    66.209.11.33:80
    https tunnel

    Looks like UC is actively fighting us. This has never happened using wifi.
    Have a Gfive Logic X1, unrooted with 4.2.2 & Arm v7. No other firewall or interfering software.
     
  2. Boo Berry

    Boo Berry Moderator + Beta Tester Moderator

    Joined:
    May 30, 2012
    Messages:
    4,171
    My first shot in the dark guess would be the browser is using some sort of "data compression" (aka data saver in UC Browser), but I'm not sure if it'd cause this or not (I'll try to test this browser when I get some time). The devs will probably need logs for this one.
     
  3. rjm831

    rjm831 New Member

    Joined:
    Jul 25, 2017
    Messages:
    5
    True that I've compression enabled for data on the browser, but I've used it previously with Adguard enabled & had no problem. This was a direct injection attack against Adguard specifically.
     
  4. avatar

    avatar Administrator Staff Member Administrator

    Joined:
    Oct 26, 2010
    Messages:
    13,144
    injections.adguard.com is a virtual domain which is used to serve cosmetic rules to the web pages. Adguard should've intercepted that request.

    However, "https tunnel" means that AG failed to decrypt connection for some reason. I wonder why it happens on cellular data only.

    Could you please collect Adguard's log for me?
    Here is an instruction: https://kb.adguard.com/en/android/solving-problems/log
     
  5. rjm831

    rjm831 New Member

    Joined:
    Jul 25, 2017
    Messages:
    5
    Sorry for the lengthy log. Incident occurred between 6-8am.
     

    Attached Files:

  6. avatar

    avatar Administrator Staff Member Administrator

    Joined:
    Oct 26, 2010
    Messages:
    13,144
    The thing is that I need a log recorded with "Record everything" level. Please note, that it will be rather huge.
     
  7. rjm831

    rjm831 New Member

    Joined:
    Jul 25, 2017
    Messages:
    5
    I understand. Been unable to reproduce it so far - I'm still receiving the same UC 'injection' (only on data) but it's not shutting AG down.
    I'll try a few more times - anything that can disable any adblocker or firewall is worth investigating. Thanks for getting back to me.