When the going gets weird, the weird turn pro. - Hunter S. Thompson

10 May 2009

What the hell is going on here?

Update: More people are noticing this emergent phenomenon. 

Quite a few more people.

But nobody knows for sure what's going on yet.

A string of Javascript beginning

input id="gwProxy" type="hidden"

... started showing up in blog entries in HTML the other day - on one machine, the Vista laptop.

The phenomenon has been noticed and is spreading.

This little snippet of code is not in and of itself malware, but it calls another program, and I'm betting that one does something naughty.

Anybody have a clue what flavor of ghost is in my machine? The Macs are all unaffected.

Antivirus and spyware scans (Avast antivirus; Windows Defender and Spybot Search and Destroy) of the affected machine report negative.

No comments: