Reply
javascript being added to all pages (spyware?)
Old 03-16-2008, 09:00 AM javascript being added to all pages (spyware?)
Skilled Talker

Posts: 73
Name: Mattias Nordahl
Location: Sweden
On every single web page I open, no matter what page it is or if I'm using Firefox or IE, a javascript code is always added at the bottom, after the < /html > tag. I've tried every cleaning program/method I can think of but I can't manange to remove it.

I have Panda IS (Internet Security), which seem to catch all possible threats, up and running all the time so I don't know how it got there in the first place. Got any ideas?

If you want to I can post the code that is being added, but I warn you, it's a lot of code.

Last edited by lizciz : 03-16-2008 at 06:52 PM.
lizciz is offline
Reply With Quote
View Public Profile
 
When You Register, These Ads Go Away!
     
Old 03-16-2008, 11:40 AM Re: javascript being added to all pages (spyware?)
ADAM Web Design's Avatar
Canadastaninianite

Posts: 5,945
Name: Adam for web page design, not program
Location: Toronto, Ontario, Canada
Post it anyway. It's the only way we can figure out what's going on.
ADAM Web Design is offline
Reply With Quote
View Public Profile Visit ADAM Web Design's homepage!
 
Old 03-16-2008, 06:50 PM Re: javascript being added to all pages (spyware?)
Skilled Talker

Posts: 73
Name: Mattias Nordahl
Location: Sweden
I seriously can't post all that code here, it's about 1000 rows. Instead I saved it as a text file, which you can find at this temporary address.

http://kattakombens.com/crap/spyware.txt

Hope anyone can make sense of it, because I sure can't...
lizciz is offline
Reply With Quote
View Public Profile
 
Old 03-16-2008, 07:13 PM Re: javascript being added to all pages (spyware?)
ADAM Web Design's Avatar
Canadastaninianite

Posts: 5,945
Name: Adam for web page design, not program
Location: Toronto, Ontario, Canada
That's spyware all right. No question about it. The "sexthe.net" is a dead giveaway. Looks like a browser hijack.

I don't know what specific spyware version it is, but here are a few things you can do:

1) Get AVG Anti-Virus AND Anti-Spyware. They're both free, and if the spyware was distributed via a trojan horse (as I suspect), it should catch it.

If AVG doesn't kill it, and it usually will, try Ad-Aware. One of the two (AVG or Ad-Aware) will get rid of at least 99% of problems without recurrence.

2) Empty out your temporary Internet files. It doesn't fully explain why you see the behavior in both Internet Explorer and Firefox, but it's a good habit to get into.

3) Get a copy of HijackThis! It's not for the newbie, but if you have some degree of tech-savvy, HJT will let you know what types of things are tied into your browser installations and what types of running processes you may have.

Some of them are good, and some bad. If you don't know what something is...ask before you delete it (ideally, post your HijackThis! log). This is a terrific program if used properly, and a complete disaster if it isn't. So tread lightly.

4) If you're running XP, go into Start-->Run, and type in "msconfig" (without quotes). There's a Startup tab across the top. Pick "Selected Startup", and uncheck things that you don't recognize. It's a pretty easy tool to use and you probably won't do much damage with it (if you're careful...remember, if you don't know what something is, don't kill it.)

One of these four things should take care of it.
ADAM Web Design is offline
Reply With Quote
View Public Profile Visit ADAM Web Design's homepage!
 
Old 03-17-2008, 06:14 AM Re: javascript being added to all pages (spyware?)
Skilled Talker

Posts: 73
Name: Mattias Nordahl
Location: Sweden
Thanks alot for your help, I tried most of the steps you suggested, all with no luck (had a friend whom could help me with HijackThis!). Instead I managed to get some other crap into my computer from somewhere

Now every time the computer starts Panda finds a "dangerous virus" in C:\a.bat which it removes. It keeps coming back every time I reboot my computer. Also Firefox sometime "dies", as if I unplug the network cable (while IE is still working).

I really don't like when things aren't working, especially not my computer so I have decided to format it and reinstall everything. That way I know there will be no viruses, trojans, spyware to trouble me!

Once again, thanks for the help you gave me, it will probably be of great help in the future too!
lizciz is offline
Reply With Quote
View Public Profile
 
Old 03-17-2008, 09:50 AM Re: javascript being added to all pages (spyware?)
ADAM Web Design's Avatar
Canadastaninianite

Posts: 5,945
Name: Adam for web page design, not program
Location: Toronto, Ontario, Canada
Yeah, format and reinstall is always a sure thing. Sucks that you couldn't kill it though.

Looks like it's something pretty old, too.

http://vil.nai.com/vil/content/v_99491.htm

And neither Panda nor AVG got rid of it?
ADAM Web Design is offline
Reply With Quote
View Public Profile Visit ADAM Web Design's homepage!
 
Reply     « Reply to javascript being added to all pages (spyware?)
 

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off




   
RSS Feed  Feeds: RSS   JS   XML
RSS Feed  Feeds for this forum: RSS   JS   XML

 


Page generated in 0.13914 seconds with 13 queries