Adware.Script.Pusher.gen

[MariaR]

Hello,

It’s my first time writing here. If I am doing something wrong, please, excuse me.

Some weeks ago one problem appeared. When I entered some websites, my Kaspersky Anti-Virus sent me 3 notifications like:

1. the file is detected,

2. the download is prohibited,

3.the website which can be used for harm of your PC and personal data is detected

Before it was always connected with p.mobilebanner.ru/ad/base?

From yesterday the way of it changed. I  was visiting the website text.ru/antiplagiat and got only 2 notifications (the file is detected and the download is prohibited) but the object’s name was connected with realmedia.ru. 

I have run the Anti-Virus for several times and nothing was spotted. 

I’m worried what it can be. There is a problem in my PC or on websites that I visit? 

It appears on 2 different browsers. Moreover, in Detected Objects (screen 1) all that appeared only for once (that the object can’t be cured). No matter how many times I had the problem. And in Web-Antivirus (screen 2) there are much information about all that every time it appeared.

Type of these objects is Adware. 

 

Thanks!

[Wesly.Zhang]

Hello, @MariaR 

These two JS file are been blocked by webav. So you don’t need take care about it.

Regards.

[MariaR]

Hello, @MariaR 

These two JS file are been blocked by webav. So you don’t need take care about it.

Regards.

Hello @Wesly.Zhang !

Thank you very much! Sorry for taking your time but I have another question.

And I noticed that today it was without JS (also ‘download was prohibited’). Nothing to be worried about?..

 

[Wesly.Zhang]

Hello,

the rotator.min.js is a very fake alarm push information. If you often visit the website, The detection occured today. I think this website have been hacked and inject this JS today or website admin add this adware js to the website today. So you don’t access the website these days or report isssue to website admin to confirm the problem.

Regards.

[Wesly.Zhang]

​Hello, @MariaR 

Now. The situation has changed so fast beyond my imagination. Amazing! This website has injected a new JS script “88e1fbf6645175298c17d0f9e628be84.js”, removed old rotator.min.js file. But it also is been detected……

Who are you? Guy.

​

Regards.

[MariaR]

@Wesly.Zhang thank you for your answers. I will not visit that website for a time and will hope that everything is fine if Kaspersky blocks ‘downloads’ like that.