Is my ISP injecting JS line ?

Ye' old general discussion board. Basically, for everything that isn't covered elsewhere. Come here to shoot the breeze, shoot your mouth off, or whatever suits your fancy.
This forum is not for asking programming related questions.

Moderator: General Moderators

User avatar
s.dot
Tranquility In Moderation
Posts: 5001
Joined: Sun Feb 06, 2005 7:18 pm
Location: Indiana

Post by s.dot »

I recently read an article about an ISP inserting stuff into google's home page.
Set Search Time - A google chrome extension. When you search only results from the past year (or set time period) are displayed. Helps tremendously when using new technologies to avoid outdated results.
User avatar
califdon
Jack of Zircons
Posts: 4484
Joined: Thu Nov 09, 2006 8:30 pm
Location: California, USA

Post by califdon »

I hope there's a special room in Hell for those who deliberately interfere with the operations and enjoyment of other people by hacking like that.
User avatar
anjanesh
DevNet Resident
Posts: 1679
Joined: Sat Dec 06, 2003 9:52 pm
Location: Mumbai, India

Post by anjanesh »

Now its a new domain : asdafdgfgf.com
With g.asdafdgfgf.com/ad.js script being called.

How on earth do I stop this if its coming from the network ?
User avatar
Jonah Bron
DevNet Master
Posts: 2764
Joined: Thu Mar 15, 2007 6:28 pm
Location: Redding, California

Post by Jonah Bron »

Talk to your ISP:idea:
User avatar
Inkyskin
Forum Contributor
Posts: 282
Joined: Mon Nov 19, 2007 10:15 am
Location: UK

Post by Inkyskin »

Have you tried other browsers yet too?
User avatar
RobertGonzalez
Site Administrator
Posts: 14293
Joined: Tue Sep 09, 2003 6:04 pm
Location: Fremont, CA, USA

Post by RobertGonzalez »

You need a new ISP. The only thing I could suggest, as a test, is to connect to a network that serves internet from another ISP than yours and see if the sites you visit are still throwing that mess in your browser.
User avatar
anjanesh
DevNet Resident
Posts: 1679
Joined: Sat Dec 06, 2003 9:52 pm
Location: Mumbai, India

Post by anjanesh »

Inkyskin wrote:Have you tried other browsers yet too?
I started this thread explaining why its not the browser at fault here.

Its coming in directly through the network. The line is getting injected into the html page before its received in my PC.

Apparently, some script is attacking PCs with open ports.
User avatar
Chris Corbyn
Breakbeat Nuttzer
Posts: 13098
Joined: Wed Mar 24, 2004 7:57 am
Location: Melbourne, Australia

Post by Chris Corbyn »

anjanesh wrote:
Inkyskin wrote:Have you tried other browsers yet too?
I started this thread explaining why its not the browser at fault here. ....

Apparently, some script is attacking PCs with open ports.
And you have a firewall?
User avatar
anjanesh
DevNet Resident
Posts: 1679
Joined: Sat Dec 06, 2003 9:52 pm
Location: Mumbai, India

Post by anjanesh »

default, Windows Firewall.
But this is seems to affect the gateways at which point it modifies the HTML source.
User avatar
Chris Corbyn
Breakbeat Nuttzer
Posts: 13098
Joined: Wed Mar 24, 2004 7:57 am
Location: Melbourne, Australia

Post by Chris Corbyn »

anjanesh wrote:default, Windows Firewall.
But this is seems to affect the gateways at which point it modifies the HTML source.
And your ISP have said...? When you request a file from 'localhost' this line isn't there then?

For now I'd just disable JavaScript in your web browser and hassle your ISP for answers. Do you know other people using the same ISP as you who are experiencing the same issue?
User avatar
anjanesh
DevNet Resident
Posts: 1679
Joined: Sat Dec 06, 2003 9:52 pm
Location: Mumbai, India

Post by anjanesh »

Tech support from ISP at this level are no good. Called them once - tried explaining - same answer over & over again - pl contact hardware engineer.
When you request a file from 'localhost' this line isn't there then?
Obviously.

For now, I've made 2 precautions :
1. Using AdBlock Plus extension on FF
2. Added entries in hosts file mapping them to 127.0.0.1
Do you know other people using the same ISP as you who are experiencing the same issue?
1. It doesnt seem to be from one ISP alone (btw, there seems to be just one major ISP called AirTel that provide the groundwork for other ISPs)
2. I dont think other users, who are affected know abt this.
3. I've come across 2 other Indians voicing their issues on the net regarding this - all on Windows XP SP2, different locations, different ISPs.

There arent many google results on 222360.com. Most of them in chinese.

Not very sure - but it seems to attack open ports resulting in slow internet.

How can I know & block the ports opened by FireFox & ThunderBird ? I understand FF uses some ports for bookmarks, etc.
I can see it in netstat

Code: Select all

...
  TCP    hpcompaq:1056          localhost:1057         ESTABLISHED     2492
  [firefox.exe]

  TCP    hpcompaq:1057          localhost:1056         ESTABLISHED     2492
  [firefox.exe]

  TCP    hpcompaq:1061          localhost:1062         ESTABLISHED     2492
  [firefox.exe]

  TCP    hpcompaq:1062          localhost:1061         ESTABLISHED     2492
  [firefox.exe]
...
jmut
Forum Regular
Posts: 945
Joined: Tue Jul 05, 2005 3:54 am
Location: Sofia, Bulgaria
Contact:

Post by jmut »

Check these directives in your php.ini
auto_prepend_file =
auto_append_file =
User avatar
anjanesh
DevNet Resident
Posts: 1679
Joined: Sat Dec 06, 2003 9:52 pm
Location: Mumbai, India

Post by anjanesh »

Code: Select all

; Automatically add files before or after any PHP document.
auto_prepend_file =
auto_append_file =
User avatar
RobertGonzalez
Site Administrator
Posts: 14293
Joined: Tue Sep 09, 2003 6:04 pm
Location: Fremont, CA, USA

Post by RobertGonzalez »

Have you at least disabled javascript for now?
User avatar
anjanesh
DevNet Resident
Posts: 1679
Joined: Sat Dec 06, 2003 9:52 pm
Location: Mumbai, India

Post by anjanesh »

Nope: Im using AdBlock extension to disable some of the JavaScript.
Post Reply