MajorGeeks Support Forums

Go Back   MajorGeeks Support Forums > ----------= PC, Desktop and Laptop Support =---------- > Malware Removal
Register FAQ Members List Calendar Casino Mark Forums Read

Malware Removal Malware removal forum. Please see the READ ME FIRST thread before you post. Forum is staffed by a small number of volunteers, please be patient.


Reply
 
Thread Tools Display Modes
  #1  
Old 04-28-12, 08:46
Domeees Domeees is offline
Private E-2
 
Join Date: Apr 2012
Posts: 1
Thanks: 1
Thanked 0 Times in 0 Posts
Question YontooInstallID: suspicious iframes,hidden divs and scripts

Hello. When I open some internet site and run it through firebug to view the source code. Some additional divs and scripts display there.


I can see this in the source code of any site. The code is always different but in a way similar.
Code:
<script type="text/javascript" src="http://cdn1.certified-apps.com/scripts/shared/enable.js?si=26525&sd=2012-3-16">
<div id="_GPL_e6a00_div" style="position: absolute;">
<div id="YontooLocationStore2" style="display: none;">http://pixel-expression.com/freelance/index.php?todo=login</div>
<div id="dropdowndeals" class="yontoolayerwidget" style="left: 1200px; top: 0px; text-align: left; vertical-align: top; width: 155px; height: 1px; line-height: 0px; z-index: 2147483647; position: fixed;">
<div id="TopRelatedTopics" class="yontoolayerwidget" style="left: 0px; top: 0px; text-align: left; vertical-align: top; width: 0px; height: 0px; position: absolute;"></div>
<div id="TBTMySuperCheap" class="yontoolayerwidget" style="left: 0px; top: 0px; text-align: left; vertical-align: top; width: 1px; height: 1px; position: absolute;">
<div id="YontooInstallID" style="display: none;">5a4533fc-84f7-4c12-a69a-adcae8b0115c</div>

<!- *****Even if I view the source code of local site, i can see this.****** -->

<script type="text/javascript" src="http://cdn1.certified-apps.com/scripts/shared/enable.js?si=26525&sd=2012-3-16">
<div id="YontooInstallID" style="display: none;">5a4533fc-84f7-4c12-a69a-adcae8b0115c</div>



<!- *****Also noticed in header some script that should be there.****** -->

<script type="text/javascript" src="http://www.TopRelatedTopics.com/Extension/TRTExtension.js">
<script type="text/javascript" src="http://app.mysupercheap.com/scripts/extension.js?d=pixel-expression.com">
Reply With Quote
Sponsored links
  #2  
Old 04-28-12, 16:11
TimW's Avatar
TimW TimW is offline
MajorGeeks Administrator - Jedi Malware Expert
 
Join Date: Jan 2005
Location: The recesses of my mind!
Posts: 46,715
Thanks: 449
Thanked 4,656 Times in 4,395 Posts
Default Re: YontooInstallID: suspicious iframes,hidden divs and scripts

Problems like this are really more of a vulnerability issue and not truly malware. How people write their website code, how old/unupdated the software they write it with, and how secure the servers that host it are really the areas to look at. Issues here are commonly referred to as code injection ( see: http://en.wikipedia.org/wiki/Code_injection ) The things we do in this forum are not going to find problems in your code. None of these malware scanners will since they are not design for this purpose.

You are going to need to have a very good webpage developer check the code for security issues and you need to verify that all software being used has been updated to include all security patches. In addition, you need to make sure that the server hosting the website also has been fully updated.
__________________
Major cake licker.
YCLAHTW, BYCMHD!!

Major Geeks on Facebook

Major Geeks Newsletter
Reply With Quote
The Following User Says Thank You to TimW For This Useful Post:
Domeees (04-28-12)
Reply

Tags
yontooinstallid

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
How do u quickly make all your PC's hidden files not hidden jacknscoob Software 3 02-23-12 10:04
Suspicious hidden objects and spoolsv is gone! Help! mimi@mimisrugs Malware Removal 3 01-24-11 12:29
CSS divs positioning question georgey12345 Software 1 06-16-09 07:17
Scripts jerseydevil Software 1 04-09-06 20:20
Looking for Some Scripts Yzaraf Software 5 10-17-04 13:02


All times are GMT -5. The time now is 01:59.

MajorGeeks.Com Menu

MajorGeeks.Com \ All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ NEW! PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads

MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds


All content Copyright MajorGeeks.com source code Powered by vBulletin® Version 3.8.4
Copyright © 2009 vBulletin Solutions, Inc. All rights reserved.
Ad Management by RedTyger