What this code means?

Boriss · Nov 24, 2017

Hello,

Found this code on a website, with "View Page Source" via Firefox.

Can anyone help me out with "decoding" this?

Code:

<script type="text/javascript" src="http://ff.kis.v2.scr.kaspersky-labs.com/1C8B0346-2520-364F-8D5F-9E9694E98600/main.js" charset="UTF-8"></script>

The full code is here:

Code:

<html>
<head>
    <title>Keyword title</title>

    <meta name="Keywords" content="keywords,etc">
    <meta name="Description" content="Welcome Keywords!">
    <meta name="viewport" content="width=device-width, user-scalable=no">
   <link href="/css/style.css" type="text/css" rel="stylesheet">

<script type="text/javascript" src="http://ff.kis.v2.scr.kaspersky-labs.com/1C8B0346-2520-364F-8D5F-9E9694E98600/main.js" charset="UTF-8"></script></head>

It's for tracking visitors I believe, from a domain redirect.

I am very interested in knowing the kaspersky-labs code meaning.

Thank you!

riz_a · Nov 24, 2017

It's not unique or even related to the site you are inspecting. It's being injected by your antivirus (Kapersky Interent Security) as a means of interacting with the pages you visit.

Boriss · Nov 24, 2017

Thank you @riz_a
Much appreciated.

ahmadsoe · Nov 25, 2017

Maybe you will know more if you can see the source code of the js file.

YesAndNo · Nov 27, 2017

Yeah, that is for sure your antivirus. By the way, did you just notice this on the first website you visited after you installed this antivirus.

Boriss · Nov 27, 2017

YesAndNo said:
Yeah, that is for sure your antivirus. By the way, did you just notice this on the first website you visited after you installed this antivirus.

I only noticed that when I viewed the Page Source.

I'm sure it's from my antivirus software.

qeqe2 · Dec 5, 2017

Technically the antivirus shouldn't be able to inject codes into your web traffic without breaking SSL encryption. That code was most likely added by the web server.

if your antivirus was able to do it then there are huge security implications in this.

RightFootFanatic · Dec 5, 2017

qeqe2 said:
Technically the antivirus shouldn't be able to inject codes into your web traffic without breaking SSL encryption. That code was most likely added by the web server.

if your antivirus was able to do it then there are huge security implications in this.

AV Suites especially Kaspersky tunnels SSL connection over their own SSL implementation. It's totally anoying when debugging stuffe with firebug or other console tools. Also if anyone gains control over your AV he'S able to some shit.

qeqe2 · Dec 6, 2017

RightFootFanatic said:
AV Suites especially Kaspersky tunnels SSL connection over their own SSL implementation. It's totally anoying when debugging stuffe with firebug or other console tools. Also if anyone gains control over your AV he'S able to some shit.

Wow I really wouldn't like to see my traffic routed to some tunnels managed by people I don't know.

airsocks · Dec 13, 2017

riz_a said:
It's not unique or even related to the site you are inspecting. It's being injected by your antivirus (Kapersky Interent Security) as a means of interacting with the pages you visit.

I wouldn't recommend using Kaspersky anivirus

Alex D. · Dec 13, 2017

airsocks said:
I wouldn't recommend using Kaspersky anivirus

For me Kaspersky is the number one. I use it on all devices. Also had experiences with many others, the fact that you can't find license for Kaspersky online speak for yourself. It's true they track my data (which company don't) but at least I'm sure that data will stay inside of Russia.

What this code means?

Boriss

Elite Member

riz_a

Junior Member

Boriss

Elite Member

ahmadsoe

Junior Member

YesAndNo

BANNED

Boriss

Elite Member

qeqe2

Newbie

RightFootFanatic

Regular Member

qeqe2

Newbie

airsocks

Junior Member

Alex D.

Supreme Member

Main Menu

Marketplace

Making Money

BlackHat World