Page 1 of 2 12 LastLast
Results 1 to 15 of 20
  1. #1
    Banned Member
    Join Date
    Mar 2012
    Location
    Calgary
    Posts
    2,522
    Thanks
    0
    Thanked 170 Times in 142 Posts

    Comments? What the heck?

    Recently I keep getting these, oodles of them, repeatedly. Anyone have idea what, why or how to stop them wherever the origin.

    Capture3.JPG

    They go in the Downloads folder looking like this

    Capture4.JPG

    Just to see if it made any difference, remove Java & even rebooted; made no difference.

  2. #2
    WS Lounge VIP
    Join Date
    Dec 2009
    Location
    Earth
    Posts
    8,199
    Thanks
    48
    Thanked 986 Times in 916 Posts
    Looks like your browser security. Try viewing it in another browser.

    cheers, Paul

  3. #3
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,592
    Thanks
    5
    Thanked 1,059 Times in 928 Posts
    Have you looked at one in a text editor?

    Joe

  4. #4
    Banned Member
    Join Date
    Mar 2012
    Location
    Calgary
    Posts
    2,522
    Thanks
    0
    Thanked 170 Times in 142 Posts
    Have I looked @ one what in a text editor, Joe?

    Hey, would you look @ the 'broken' Sig w/ me, please. Was fine, but, I was order to delete images from a server & maybe that broke it. This site doesn't seem to use the same things as others... I supplied some things to make last time but, I don't know what was (actually) used.

    Thanks in advance. Bit pointless, whilst broken.

  5. #5
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,592
    Thanks
    5
    Thanked 1,059 Times in 928 Posts
    Look at one of the .js files. Isn't that what you asked about? It could be your .js file association is broken. Do you have any idea of what is downloading the files?

    BTW, remember Java and JavaScript are different languages. Removing Java would make now difference in how a JS file is handled.

    As far as your signature goes, edit your profile, then select "Edit signature" in the left panel. You should be able to upload a signature picture there.

    Joe

  6. #6
    Banned Member
    Join Date
    Mar 2012
    Location
    Calgary
    Posts
    2,522
    Thanks
    0
    Thanked 170 Times in 142 Posts
    That's part of why I asked, have no idea where they are coming from... it's quite recent behavior. Forget if I tried opening any of them; if get another or more will look @ opening; haven't had any for the last little while. Yeah, I know, already, yelled @ myself for being a momentary idiot removing & re-installing Java.

    As for the Sig... that's what I had tried, of course, in the 1st place... none of the 'normal', usual, stuff worked so somebody did it but, as I said, I don't know what they used (of what I supplied) or did. Anyway, I'll take a look @ it again. I know it "should be" possible there but... Thanks, anyway.

    Anyway, we'll see what happens this time.

    Ok, no snags w/ the standard process this time.
    Last edited by Drew1903; 2015-07-06 at 23:59.

  7. #7
    Banned Member
    Join Date
    Mar 2012
    Location
    Calgary
    Posts
    2,522
    Thanks
    0
    Thanked 170 Times in 142 Posts
    Now, I recall I had opened; this is all you get...
    Capture5.JPG
    Last edited by Drew1903; 2015-07-07 at 02:44.

  8. #8
    WS Lounge VIP Coochin's Avatar
    Join Date
    Jun 2014
    Location
    Queensland, Australia
    Posts
    2,154
    Thanks
    31
    Thanked 307 Times in 267 Posts
    As has been suggested in previous posts try opening one or those .js files in a text editor (e.g.: notepad). Maybe you will be able to figure out what is causing the problem.
    Last edited by JoeP517; 2015-07-07 at 12:43. Reason: removed unnecessary personal comment
    Computer Consultant/Technician since 1998 (first PC was Atari 1040STE in 1988).
    Most common computing error is EBKAC: Error Between Keyboard And Chairback
    AMD FX8120 (8-core @ 3.1GHz) CPU, Gigabyte GA-990FXA-D3 motherboard, 8GB (2x4GB) DDR3 1866MHz RAM, ATI-AMD Radeon HD6770 PCI-E VGA, 480GB Kingston SSD, 2TB Seagate SATA3.0 HDD, ASUS DVD/RW.

  9. #9
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,592
    Thanks
    5
    Thanked 1,059 Times in 928 Posts
    Use a text editor to open it. Don't just double click it.

    Joe

  10. #10
    Banned Member
    Join Date
    Mar 2012
    Location
    Calgary
    Posts
    2,522
    Thanks
    0
    Thanked 170 Times in 142 Posts
    Guys, please don't treat me like I'm stupid... I have tried all that to no avail before putting an inquiry here.

  11. #11
    Super Moderator satrow's Avatar
    Join Date
    Dec 2009
    Location
    Cardiff, UK
    Posts
    4,492
    Thanks
    284
    Thanked 577 Times in 480 Posts
    A .js file that won't open in a text editor? Really?

    Upload one of them to VirusTotal and link us to it, please.

  12. #12
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,592
    Thanks
    5
    Thanked 1,059 Times in 928 Posts
    Well, you haven't told us anything about what happens when you open it in a text editor. Leaving out all the details opens yourself up for the simple suggestions which appear to offend you.

    Joe

  13. #13
    Banned Member
    Join Date
    Mar 2012
    Location
    Calgary
    Posts
    2,522
    Thanks
    0
    Thanked 170 Times in 142 Posts
    Ok, here it is... Quite sure they are all the same or will be since I believe whatever the source it is common to all of them.


    !function(t,e){t.FQTag=t.FQTag||function(o){var n,r=t.encodeURIComponent,i=["s","r","c"].join(""),a=["i","n","n","e","r","H","T","M","L"].join(""),l=["aux=1"],s="http://fqtag.com/pixel",d="s"+Math.floor(1000000001*Math.random()); o.iif=t.top.location!=t.location,o.rf||(o.rf=e.ref errer),o.rf.length>1e3&&(o.rf.indexOf("?")>-1?o.rf=o.rf.split("?")[0]:o.rf.indexOf("%3F")&&(o.rf=o.rf.split("%3F")[0])),o.loc||(o.loc=e.location),o.loc.length>1e3&&(o. loc.indexOf("?")>-1?o.loc=o.loc.split("?")[0]:o.loc.indexOf("%3F")&&(o.loc=o.loc.split("%3F")[0])),o.s=o.s||(new Date).getTime().toString(36)+"-"+Math.floor(4294967296*(1+Math.random())).toStrin g(16).substring(1),o.tag=1;for(var c in o)o.hasOwnProperty(c)&&("rt"===c?n=r(o[c]):l.push(r(c)+"="+r(o[c])));n=n||"click",l=l.join("&");var f=function(t,e){var o=!1;t.onload=t.onreadystatechange=function(){o||t his.readyState&&"loaded"!=this.readyState&&"comple te"!=this.readyState||(o=!0,t.onload=t.onreadystat echange=null,e&&e())}},h=e.createElement("div");h. style.height=h.style.width="1px",h.style.bottom=h. style.right="0",h.style.position="absolute",h.styl e.pointerEvents="none";var p=e.createElement("script");p[i]=s+".js?cId="+d+"&rt=js&irt="+n+"&"+l,f(p);var m="__fq_iframe_"+Math.floor(1000000001*Math.random ()),y=s+"?rt="+n+"&"+l;h[a]='<iframe id="'+m+'" src="'+y+'" name="'+m+'" style="border:0;height:1px;margin:0;padding:0;widt h:1px"></iframe>';var g=function(){if(e.body){h.appendChild(p),e.body.ap pendChild(h);var o=e.getElementById(m),n="s_"+d,r=function(){t.__sP &&t.__sP[n]?(t.__sP[n](o,y),o.onload=o.onreadystatechange=null):setTimeo ut(r,10)};f(o,r)}else setTimeout(g,0)};g()}}(window,document);!function( ){FQTag({"org":"NxSzFEDrd2dea0plDXSp","fmt":"banne r","s":"2832998378784193052","rd":"http://www.live365.com/web/components/ads/top740x90.html?tm=0.3883975319483888","p":"2437"," a":"323216","cmp":"9571618","c1":"621360","c2":"32 132257","c3":"6057177319496717983","c4":"4827991", "ctu":"http://lax1.ib.adnxs.com/click?KVyPwvUoBEApXI_C9SgEQH9qvHSTGOw_KVyPwvUoBEAp XI_C9SgEQBx6sAAE1VAnn5YnBq5qD1RgfptVAAAAAFerSQCFCQ AAhQkAAAIAAAChTOoBpKkFAAAAAQBVU0QAVVNEANgCWgAWcgAA nQcAAgMAAQIAAKAAgSIk-gAAAAA./cnd=%213AV0NgiimsgEEKGZqQ8YpNMWIAQ./referrer=http%3A%2F%2Fwww.live365.com%2Fweb%2Fcomp onents%2Fads%2Ftop740x90.html%3Ftm%3D0.38839753194 83888/clickenc=http%3A%2F%2Fwww.toysrus.ca%2Ffamily%2Fin dex.jsp%3FcategoryId%3D58322536%26locale%3Den_CA%2 6camp%3DBRU_PBG_VendorExternal_25offdisney_leaderb oard_NUK_070315","rt":"display","sl":"1","apn":"1" });}();


    Maybe coming from live365, maybe. But, as stated, it only started fairly recently... I've been listening to live365 forever in both IE & Edge. I do see live365 in the text, so is toy-R-us. Have seen no unusual behavior in live365 & of course, have never 'clicked' on anything such as adverts, etc. Beats me what has started these showing up or what might end it.
    Last edited by RetiredGeek; 2015-07-07 at 16:21. Reason: Added NoParse tags.

  14. #14
    Super Moderator satrow's Avatar
    Join Date
    Dec 2009
    Location
    Cardiff, UK
    Posts
    4,492
    Thanks
    284
    Thanked 577 Times in 480 Posts
    I don't do js but I'll hazard a guess that it's related to an anti-fraud measure designed to detect automated ad-clicking: http://forensiq.com/

  15. #15
    Banned Member
    Join Date
    Mar 2012
    Location
    Calgary
    Posts
    2,522
    Thanks
    0
    Thanked 170 Times in 142 Posts
    Sorry, have to admit I was being stupid for a moment... was using Open with instead of Edit. I went & stood in the corner for a while w/ a dunce cap on me head.

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •