Author Topic: www.google-analytics.com/ga.js keeps poping out saying its malicious  (Read 11534 times)

0 Members and 1 Guest are viewing this topic.

BuzzD

  • Guest
Like the title says, I don't get it, everything was fine a couple of days ago then when I updated the program, its says that at most of the web pages I visit. By the way the same thing happens on my laptop too.

It says threat is HTML:Iframe-inf

nslookup www.google-analytics.com :

Server :   173.193.227.124-static.reverse.softlayer.com
Address:  173.193.227.124

Name :    www.google-analytics.com
Address:  85.10.195.196
-----------------------------------
WHois: IP address: 85.10.195.196
Server Location: Nürnberg, Bayern in Germany
ISP: Hetzner Online AG

------------------------------------
attached are my mbam log (which was clean)
and the OTS log is too big to attach so hwo do you want me to send it to you?


Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: www.google-analytics.com/ga.js keeps poping out saying its malicious
« Reply #1 on: March 28, 2011, 08:39:09 PM »
Somehow you have subscribed to google analytics.  A work round is to add the following to your host file

# [Google Inc]
127.0.0.1 www.google-analytics.com

BuzzD

  • Guest
Re: www.google-analytics.com/ga.js keeps poping out saying its malicious
« Reply #2 on: March 28, 2011, 09:07:04 PM »
it looks to be working but I dont remember subscribing to that...

Thanks for your help

doktornotor

  • Guest
Re: www.google-analytics.com/ga.js keeps poping out saying its malicious
« Reply #3 on: March 28, 2011, 09:41:21 PM »
Please read (and if needed continue) in this thread: http://forum.avast.com/index.php?topic=74637.0

Sadly, I got exactly zero response (except for a useless automated reply) from both hosting companies about this until now.  >:(

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: www.google-analytics.com/ga.js keeps poping out saying its malicious
« Reply #4 on: March 28, 2011, 09:54:50 PM »
Google analytics tracks your surfing movements via a JS file hence Avast will alert on it.  At some stage either a programme you have downoaded or a service you have subscribed to has placed the JS on your system

doktornotor

  • Guest
Re: www.google-analytics.com/ga.js keeps poping out saying its malicious
« Reply #5 on: March 28, 2011, 09:56:29 PM »
Google analytics tracks your surfing movements via a JS file hence Avast will alert on it.  At some stage either a programme you have downoaded or a service you have subscribed to has placed the JS on your system

Please, read the thread I have referred to as well. This is NOT the real Google Analytics causing this issue.