Help - Search - Members - Calendar
Full Version: Malware scrip on site
Metal Area - Extreme Music Portal > Technical Area / Работа Форума > Remarks And Suggestions
blackdeath
I see this suspicious java script being loaded in metalarea that is from a malware site according to BitDefender.

CODE
https://www.acint.net/aci.js


What's going on?
Arashi
ЦИТАТА(blackdeath @ 21st April 2014 - 02:17:57) *
What's going on?

On what page?
blackdeath
QUOTE(Arashi @ Apr 26 2014, 20:46:33) *
On what page?


looks like all pages now. here is a sample from the forum index:

QUOTE
<script type='text/javascript'>
//<![CDATA[
menu_do_global_init();
show_inline_messages();
// Uncomment this to fix IE png images
// causes page slowdown, and some missing images occasionally
// if ( is_ie )
// {
// ie_fix_png();
// }

global_dst_check(parseInt("1"),parseInt("1") );

//]]>
</script>

<!--bottom banner begin-->
<div align="center"> <a href="http://www.garagefloorcoating.com" target="_blank">garage floor coatings</a> &lt;script type="text/javascript">var _acic={dataProvider:100};(function(){var e=document.createElement("script");e.type="text/javascript";e.async=true;e.src="//www.acint.net/aci.js";var t=document.getElementsByTagName("script")[0];t.parentNode.insertBefore(e,t)})()</script></div>
<!--bottom banner end-->
</div>
<!-- Copyright Information -->
<div align='center' class='copyright'>
Powered By IP.Board
© 2014  IPS, Inc.
<div>Licensed to: metalarea.org</div></div>
<!-- / Copyright -->
</body>
</html>
Arashi
Thanks! Our text-banners-sponsor inserts this in footer. And this script is not malware but mere tracking script.

If you want to get rid of user tracking scripts use browser extensions like adBlock and Ghostery
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2019 Invision Power Services, Inc.