boen_robot Posted February 15, 2006 Share Posted February 15, 2006 Recently I started to notice some weird script appearing on few pages' codes. <script language="JavaScript"><!--var SymRealOnLoad;var SymRealOnUnload;function SymOnUnload(){ window.open = SymWinOpen; if(SymRealOnUnload != null) SymRealOnUnload();}function SymOnLoad(){ if(SymRealOnLoad != null) SymRealOnLoad(); window.open = SymRealWinOpen; SymRealOnUnload = window.onunload; window.onunload = SymOnUnload;}SymRealOnLoad = window.onload;window.onload = SymOnLoad;//--></script> What's most interesting in it is that it's placed AFTER the closing html tag. I'm a noob to JavaScript and I haven't got ANY idea of DOM stuff. Could anyone please explain me what is this code used for? Is it needed, etc.?Btw, the oddest thing. The latest beta of Opera 9 shows this csript on one of my pages that I keep on my computer. THAT script is used once in the after the closing <html> tag. There's also another script in the <head> though. <script language="JavaScript"><!--function SymError(){ return true;}window.onerror = SymError;var SymRealWinOpen = window.open;function SymWinOpen(url, name, attributes){ return (new Object());}window.open = SymWinOpen;//--></script> I haven't used even a single copy of any of those scripts. What's going on ? Link to comment Share on other sites More sharing options...
aspnetguy Posted February 15, 2006 Share Posted February 15, 2006 these just 'appeared' on your pages???? That can't be right! Have you viewed them in other browsers besides Opera??? Perhaps it is a Opera plugin messing things up??? I have never seen or heard of this before. Link to comment Share on other sites More sharing options...
boen_robot Posted February 15, 2006 Author Share Posted February 15, 2006 (edited) Actually, it seems that any browser I use to open the page shows theese two scripts in the source code. However, if I open the exact same file in Dreamwaver or Notepad I don't see theese scripts. Note that theese files are executed on my own PC(localhost/filename.html or MyIP/filename.html) and the EXACT same file(not a copy of it!) is opened in the editor... that's really odd .[edit] I also noticed it at few other sites. In fact, THIS page has it. It all starts to get more and more odd . I'm starting to think that this is something modern browsers automatically add everywhere, but why? What is this for?[/edit] Edited February 15, 2006 by boen_robot Link to comment Share on other sites More sharing options...
aspnetguy Posted February 15, 2006 Share Posted February 15, 2006 I haven't seen, I am downloading latest version of FF right now so I will test it out. Link to comment Share on other sites More sharing options...
aspnetguy Posted February 15, 2006 Share Posted February 15, 2006 just looked at the source for this page in the latest FF and Opera...the scripts aren't there.You should take a look at your add/remove programs. You may have a stupid tollbar or other spyware installed.Do a spyware scan and virus scan too. Ad-Aware is good and it is free. Link to comment Share on other sites More sharing options...
scott100 Posted February 15, 2006 Share Posted February 15, 2006 Over the past couple of weeks i have noticed this in my source code too, it happens in both IE, FF and Opera. I just ran Norton the other day and my system is clean so who knows what it is This is what i get, i took this straigt from the source code of google, looks the same as boen_robot's: <script language="JavaScript"><!--var SymRealOnLoad;var SymRealOnUnload;function SymOnUnload(){ Â window.open = SymWinOpen; Â if(SymRealOnUnload != null) Â Â SymRealOnUnload();}function SymOnLoad(){ Â if(SymRealOnLoad != null) Â Â SymRealOnLoad(); Â window.open = SymRealWinOpen; Â SymRealOnUnload = window.onunload; Â window.onunload = SymOnUnload;}SymRealOnLoad = window.onload;window.onload = SymOnLoad;//--></script> Link to comment Share on other sites More sharing options...
boen_robot Posted February 16, 2006 Author Share Posted February 16, 2006 I think I see a pattern here... I have Norton AntiVirus, Norton Internet Security and Norton System Works 2006. In short: the full package. I have allowed each to analyze everything and make all corrections automatically but ask me if something is not certain (example: unknown virus). I made a full system scan yesterday just in case, and I got nothing, so my system too is clean. That's my first time I use NIS though. I don't know how it works and what it does. Could this be some addition of it? Anyway... the purpose of this code is what troubles me most. Link to comment Share on other sites More sharing options...
aspnetguy Posted February 16, 2006 Share Posted February 16, 2006 I have no further suggestions...I am a bit concerned as well...hopefully you can resolves this soon. Link to comment Share on other sites More sharing options...
scott100 Posted February 16, 2006 Share Posted February 16, 2006 Yes i have Norton Internet Security 2006 aswell , if you look at the name of the variables and functions:var SymRealOnLoad;var SymRealOnUnload;SymOnUnload();SymOnLoad();What do they have in common: the word SymWho makes Norton? SymantecMaybe just a coincedence but it looks like Norton to me Could be something to do with ad or script blocking... Link to comment Share on other sites More sharing options...
boen_robot Posted February 16, 2006 Author Share Posted February 16, 2006 It is, it is !!!! The pop-up blocker is causing the script below, and the ad blocker is causing the script in the head section(or something like that)! I always though of "sym" as in "SYsteM" as if it was some statistic or something. Symantec didn't came into scence before I realized we both have NIS.I think this topic may be locked now, thank you . Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now