Avast WEBforum

Other => Viruses and worms => Topic started by: BuzzD on March 28, 2011, 08:24:10 PM

Title: www.google-analytics.com/ga.js keeps poping out saying its malicious
Post by: BuzzD on March 28, 2011, 08:24:10 PM
Like the title says, I don't get it, everything was fine a couple of days ago then when I updated the program, its says that at most of the web pages I visit. By the way the same thing happens on my laptop too.

It says threat is HTML:Iframe-inf

nslookup www.google-analytics.com :

Server :   173.193.227.124-static.reverse.softlayer.com
Address:  173.193.227.124

Name :    www.google-analytics.com
Address:  85.10.195.196
-----------------------------------
WHois: IP address: 85.10.195.196
Server Location: Nürnberg, Bayern in Germany
ISP: Hetzner Online AG

------------------------------------
attached are my mbam log (which was clean)
and the OTS log is too big to attach so hwo do you want me to send it to you?

Title: Re: www.google-analytics.com/ga.js keeps poping out saying its malicious
Post by: essexboy on March 28, 2011, 08:39:09 PM
Somehow you have subscribed to google analytics.  A work round is to add the following to your host file

# [Google Inc]
127.0.0.1 www.google-analytics.com
Title: Re: www.google-analytics.com/ga.js keeps poping out saying its malicious
Post by: BuzzD on March 28, 2011, 09:07:04 PM
it looks to be working but I dont remember subscribing to that...

Thanks for your help
Title: Re: www.google-analytics.com/ga.js keeps poping out saying its malicious
Post by: doktornotor on March 28, 2011, 09:41:21 PM
Please read (and if needed continue) in this thread: http://forum.avast.com/index.php?topic=74637.0

Sadly, I got exactly zero response (except for a useless automated reply) from both hosting companies about this until now.  >:(
Title: Re: www.google-analytics.com/ga.js keeps poping out saying its malicious
Post by: essexboy on March 28, 2011, 09:54:50 PM
Google analytics tracks your surfing movements via a JS file hence Avast will alert on it.  At some stage either a programme you have downoaded or a service you have subscribed to has placed the JS on your system
Title: Re: www.google-analytics.com/ga.js keeps poping out saying its malicious
Post by: doktornotor on March 28, 2011, 09:56:29 PM
Quote from: essexboy on March 28, 2011, 09:54:50 PM
Google analytics tracks your surfing movements via a JS file hence Avast will alert on it.  At some stage either a programme you have downoaded or a service you have subscribed to has placed the JS on your system

Please, read the thread I have referred to as well. This is NOT the real Google Analytics causing this issue.