🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: borland.public.cppbuilder.internet.web
Article #38

Re: unwanted javascript inserted in every html page

#38
From: Remy Lebeau (TeamB)
Date: Fri, 28 Mar 2008 16:38
29 lines
1953 bytes
"Hans Galema" <notusedagain@notusedagain.nl> wrote in message 
news:47eccebb@newsgroups.borland.com...

> With IE and Firefox nearly every page from every site I
> visit comes with a lot of javascript inserted (see below).

Sounds like you are accessing the web sites through a proxy or firewall that 
is modifying the HTML as it passes through.

> With TCppWebBrowser that does not happen.

TCppWebBrowser is just a wrapper around IE's ActiveX object.  The two behave 
the same, as they are sharing the same core.

> I think that I'm a victim of some spyware?

Possibly.  The script does have references to an external IP address 
(85.12.43.83).  A search on Yahoo shows that same script/IP in all kinds of 
places on the web.

> Who can shed some light on this? How to cure?

There are plenty of third-party anti-spyware and browser hijack detectors 
available for download, such as Ad-aware and HijackThis.  Have you run any 
of them yet?


Gambit 
Technical Details
Message-ID: <47ed1ee8$1@newsgroups.borland.com>
Path: arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!proxad.net!feeder1-2.proxad.net!194.25.134.126.MISMATCH!newsfeed01.sul.t-online.de!t-online.de!newsgroups.borland.com!not-for-mail
References: <47eccebb@newsgroups.borland.com>

Show Full Headers
Complete Article Headers
X-Google-Thread: feeec,e07bb90ead3561a4
X-Google-Attributes: gidfeeec,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
From: "Remy Lebeau \(TeamB\)" <no.spam@no.spam.com>
Newsgroups: borland.public.cppbuilder.internet.web
References: <47eccebb@newsgroups.borland.com>
Subject: Re: unwanted javascript inserted in every html page
Date: Fri, 28 Mar 2008 09:38:02 -0700
Lines: 31
Organization: Lebeau Software
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
X-RFC2646: Format=Flowed; Response
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
NNTP-Posting-Host: 207.178.157.90
Message-ID: <47ed1ee8$1@newsgroups.borland.com>
X-Trace: newsgroups.borland.com 1206722280 207.178.157.90 (28 Mar 2008 09:38:00 -0700)
Path: arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!proxad.net!feeder1-2.proxad.net!194.25.134.126.MISMATCH!newsfeed01.sul.t-online.de!t-online.de!newsgroups.borland.com!not-for-mail