Go Back   CodingForums.com > :: Client side development > General web building

Before you post, read our: Rules & Posting Guidelines

Reply
 
Thread Tools Rate Thread
Enjoy an ad free experience by logging in. Not a member yet? Register.
Old 01-05-2013, 01:14 AM   PM User | #1
BubikolRamios
Senior Coder

 
Join Date: Dec 2005
Location: Slovenia
Posts: 1,876
Thanks: 114
Thanked 76 Times in 76 Posts
BubikolRamios is on a distinguished road
js injection attack ,akamaihd.net

Code:
<a id="_GPLITA_0" title="Click to Continue > by Browse to Save" style="text-decoration:underline" href="#" in_rurl="http://i.trkjmp.com/click?v=U0k6MTY4NjA6NjpwYWdlOmRlMmY1MTlmYWI3MTBiYTViZjQzYmU1MDMxZTdjZGFmOnotMTA2My0xMDMxODc6YWdyb3pvby5uZXQ6MTI1NTA6MDFiMmZjY2M5MmYyODQ5MDg4M2VjNjc4ZTI5YjQ2MDk" in_hdr="">Page</a>
besides 'page' nothing is mine. Where/What to look at ?

the thing is comming from akamaihd.net

Code:
00:00:09.480	0.542	412	(11811)	GET	304	application/x-javascript	http://cdncache-a.akamaihd.net/loaders/1063/l.js?aoi=1311798366&pid=1063&zoneid=103187
00:00:09.498	0.500	354	183	GET	200	application/javascript	http://shpr.co/code/fsave/js/fs.js?subid=402&ex=20&uid=50e771b91be163.69808238
00:00:10.021	0.315	446	163	GET	200	application/javascript	http://shpr.co/code/fastsave/js/w.js?v=19273&subid=402&ex=20&uid=50e771b91be163.69808238&callback=fastSaveFrontend.display&url=attacked.web.page.address
00:00:10.398	0.115	364	(1924)	GET	(Cache)	application/x-shockwave-flash	http://cdncache-a.akamaihd.net/items/e6a00/storage.swf
00:00:10.540	0.154	300	(448)	GET	(Cache)	application/x-javascript	http://cdncache-a.akamaihd.net/items/it/data/ac.js
00:00:10.561	0.289	361	(239)	GET	304	application/javascript	http://cdncache-a.akamaihd.net/js/4756e6e2f6f6a7f6277616/r.jsg
00:00:10.695	0.113	299	(7616)	GET	(Cache)	application/javascript	http://cdncache-a.akamaihd.net/items/it/js/itn.js
00:00:10.809	0.100	359	(1559)	GET	(Cache)	application/x-shockwave-flash	http://cdncache-a.akamaihd.net/items/it/swf/f.swf
00:00:10.994	0.133	523	(267)	GET	(Cache)	text/xml	http://i.trkjmp.com/crossdomain.xml
00:00:11.178	0.652	653	528	POST	200	text/javascript	http://i.trkjmp.com/kwd?c=Ojo6YWdyb3pvby5uZXQ6ei0xMDYzLTEwMzE4Nw%3D%3D&cb=_GPL.items.a652c.displayKeywords

Last edited by BubikolRamios; 01-05-2013 at 01:55 AM..
BubikolRamios is offline   Reply With Quote
Old 01-05-2013, 02:38 AM   PM User | #2
BubikolRamios
Senior Coder

 
Join Date: Dec 2005
Location: Slovenia
Posts: 1,876
Thanks: 114
Thanked 76 Times in 76 Posts
BubikolRamios is on a distinguished road
Ok, with some luck this is local, on client.
To get that killed:
Look at extensions and remove / disable : "Save as" extension.

Removed that from FF and GC, In IE disable & remove are disabled,
have no idea how to clear IE.
__________________
Found a flower or bug and don't know what it is ?
agrozoo.net galery
if you don't spot search button at once, there is search form:
agrozoo.net galery search
BubikolRamios is offline   Reply With Quote
Reply

Bookmarks

Jump To Top of Thread


Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +1. The time now is 12:26 PM.


Advertisement
Log in to turn off these ads.