AT gives me RedV adware!

[Nucleus111]

Whats going on AT?
Within a second of logging on to the forums I receive the RedV adware.

The offending file is vb_2_0[1].js
Any comments?

 

[Balt]

Any comments?

You're insane?

Yes.

 

[hjo3]

Run Adaware/Spybot much? Try cleaning out your cookies, check your HOSTS file, etc. Doubt AT would have something like that.

 

[Subzero]

Originally posted by: Balt

Any comments?

You're insane?

Yes.

LOL !!

Sounds like a corrupted / bad cookie ???

 

[Nucleus111]

Using PestPatrol which works quite nicely.
Going from a blank slate directly to the forums and logging on.
Running the scan on my IE temp directory...finds it everytime.

 

[Balt]

Maybe it's being triggered (re-installing itself) by opening your browser. Have you tried opening it and visiting sites other than AT to see if you get the same result?

 

[Nucleus111]

Seems to have been a bad cookie.
Don't know why it would only show up once I logged on?

 

[Nucleus111]

The offending file is vb_2_0[1].js which relates to images.anandtech.com/js/vb_2_0[1].js and is a JScript Script File.

Any input?

 

[Aves]

Originally posted by: Nucleus111
The offending file is vb_2_0[1].js which relates to images.anandtech.com/js/vb_2_0[1].js and is a JScript Script File.

Any input?

Here it is:

// global file
// sniffs activex control (instead of flash plug in) on Windows IE with vbscript

// version 1.1
// date: 10.17.2000

var browserIE = (navigator.appVersion.indexOf("MSIE") != -1) ? true : false;

var OSWindows = (navigator.appVersion.indexOf("Windows") != -1) ? true : false;

if(browserIE && OSWindows){
document.write('<SCR' + 'IPT LANGUAGE=VBScript\> \n');
document.write('on error resume next \n');
document.write('ads_gotFlash2 = (IsObject(CreateObject("ShockwaveFlash.ShockwaveFlash.2"))) \n');
document.write('ads_gotFlash3 = (IsObject(CreateObject("ShockwaveFlash.ShockwaveFlash.3"))) \n');
document.write('ads_gotFlash4 = (IsObject(CreateObject("ShockwaveFlash.ShockwaveFlash.4"))) \n');
document.write('ads_gotFlash5 = (IsObject(CreateObject("ShockwaveFlash.ShockwaveFlash.5"))) \n');
document.write('</SCR' + 'IPT\> \n');
}

 

[CaptainKahuna]

It looks like something from one of the ads.

 

[Nucleus111]

Yup. I'm now at work and received it here on my desktop PC too. The other was my laptop.

 

[TubStain]

I have adware that refuses to leave my computer too and just got it recently. Ran spybot/adware and its not going..

 

[biostud]

Originally posted by: TubStain
I have adware that refuses to leave my computer too and just got it recently. Ran spybot/adware and its not going..

Try CWShredder

 

[SP33Demon]

WTF this better not be true.

 

[Twista]

Originally posted by: Nucleus111
The offending file is vb_2_0[1].js which relates to images.anandtech.com/js/vb_2_0[1].js and is a JScript Script File.

Any input?

PestPatrol on my pc (the program)

and im on AT with no warnings or redv thingie, though my pc seems to aways have RedV ;/

 

[Nucleus111]

Originally posted by: Twista

Originally posted by: Nucleus111
The offending file is vb_2_0[1].js which relates to images.anandtech.com/js/vb_2_0[1].js and is a JScript Script File.

Any input?

PestPatrol on my pc (the program)

and im on AT with no warnings or redv thingie, though my pc seems to aways have RedV ;/

I seem to get hit with it either when I logon or off of the forums. Try doing a scan on your temp internet files during those times.

 

[SP33Demon]

any updates?

 

[Twista]

Originally posted by: Nucleus111

Originally posted by: Twista

Originally posted by: Nucleus111
The offending file is vb_2_0[1].js which relates to images.anandtech.com/js/vb_2_0[1].js and is a JScript Script File.

Any input?

PestPatrol on my pc (the program)

and im on AT with no warnings or redv thingie, though my pc seems to aways have RedV ;/

I seem to get hit with it either when I logon or off of the forums. Try doing a scan on your temp internet files during those times.

Well i scanned my temp files, but im not sure if this is from AT or not.
Redv on scan

 

[Nucleus111]

Originally posted by: Twista

Originally posted by: Nucleus111

Originally posted by: Twista

Originally posted by: Nucleus111
The offending file is vb_2_0[1].js which relates to images.anandtech.com/js/vb_2_0[1].js and is a JScript Script File.

Any input?

PestPatrol on my pc (the program)

and im on AT with no warnings or redv thingie, though my pc seems to aways have RedV ;/

I seem to get hit with it either when I logon or off of the forums. Try doing a scan on your temp internet files during those times.

Well i scanned my temp files, but im not sure if this is from AT or not.
Redv on scan

Thats it.
If you look at your temp file directory you will see that it points to AT, as shown above.

 

[SP33Demon]

Originally posted by: Nucleus111

Originally posted by: Twista

Originally posted by: Nucleus111

Originally posted by: Twista

Originally posted by: Nucleus111
The offending file is vb_2_0[1].js which relates to images.anandtech.com/js/vb_2_0[1].js and is a JScript Script File.

Any input?

PestPatrol on my pc (the program)

and im on AT with no warnings or redv thingie, though my pc seems to aways have RedV ;/

I seem to get hit with it either when I logon or off of the forums. Try doing a scan on your temp internet files during those times.

Well i scanned my temp files, but im not sure if this is from AT or not.
Redv on scan

Thats it.
If you look at your temp file directory you will see that it points to AT, as shown above.

So AT is or isn't installing adware on our systems?

 

[Schadenfroh]

i never got any on my system from AT, but im running allot of antispyware immunizations and crap

 

[Adul]

itsa freaking javascript file that loads flash ads if flash is around, or in IE's case uses the active X control to load it.

 

[Nucleus111]

Originally posted by: Adul
itsa freaking javascript file that loads flash ads if flash is around, or in IE's case uses the active X control to load it.

I may be a complete noob when it comes to web programming, but can't javascripts and active x do harmful things?
All I know is that my organization started using PestPatrol and this file, from AT, is comming up as "confirmed" to have RedV. Twista is finding it too. PestPatrol does find more than ad-aware or spybot, I've tried them.

 

[skace]

Originally posted by: Nucleus111
PestPatrol does find more than ad-aware or spybot, I've tried them.

Yea it does find more, not only does it find the harmful things, it also apparently finds the harmless things

 

[Nucleus111]

Originally posted by: skace

Originally posted by: Nucleus111
PestPatrol does find more than ad-aware or spybot, I've tried them.

Yea it does find more, not only does it find the harmful things, it also apparently finds the harmless things

How can you classify java and active x as harmless?