Mystery   JavaScript   Oddity

UPDATE .... 3-01-2024 .... 1:20 pm EST

Firefox was deleted, then re-loaded fresh with no extensions or add-ons. Next,
Laragon was installed and APACHE started. -THIS TIME- the mystery text did -NOT- appear!
Unfortunately, I do not know which extenion/add-on may have been the culprit. But that will
be checked on as I procede to restore order to my desktop.


Now, The Original Page Posting
On Thursday February 29, 2024, a odd occurance took place. This oddity happened -ONLY WHEN- using the Firefox browser in combination
with a local server -- in this case, XAMPP or Laragon with APACHE running. A mysterious single line of javascript text, which is presented
within a bordered box to be found further down on this page, began to appear on any web-page -- either locally accessed HTML
files or accessed WWW sites -- within the HTML (at the very top of the text) just below the <HEAD> tag.

When APACHE was disabled, the oddity would then -NOT- occur in Firefox !!!!!

Please note that local html files on my computer appear to -NOT- have been in any way altered by this oddity. Only any HTML processed
by Firefox, either locally or on the WWW, and with APACHE turned on, was directly affected.

Other browsers -- Chrome, Opera, Pale Moon, SRWare Iron, Avast Secure -- were not affected by the oddity, not with APACHE on or off.
Please note that I did not think to use MS-Edge or (EGADS!) MS-IE to see if the oddity would occur with those browsers.

I have anti-virus/malware protection with AVAST Premium and Cleanup, as well as Malwarebytes.
Neither of these apps were able to detect any problems !!!


If you have recommended alternatives to one or both currently used AV-Malware apps, please know that McAfee -WILL NOT-
be an option for me, as I recently had a very bad episode with their service department (if that's what they call it).
- AND / OR / ALSO -
If there is any type of special tool app which can detect spyware-malware differently from my currently used AV-Malware
apps -AND- will not require me to disable and/or remove those current apps, please advise me.


This incident occured on the desktop computer I purchased from Alboe's April 4th 2023.
Fortunately, I have a laptop -- also from Alboe's -- now serving as a backup. WHEW! WHEW! Double WHEW!
Also, I have disassociated myself from one suspected culprit, an adult-oriented site. However, there is
also a legit site - USA TODAY - which is currently setting off AVAST alarms when I go to that site, so it
will now be avoided. The USA site is a joke anyway, and they are not getting any subscriber money from me.


VIEWING NOTE -- The normal   <   and   >   enclosure marks for   script   at the top of the mystery
text and   /script   at the bottom have been replaced with   «« and »»   marks for obvious
safety reasons. Otherwise, the mystery text is as originally found.




««script»»

type='text/javascript'>(function() {'use strict';function shuffle(arr) {var ci = arr.length,tv,ri;while (0 !== ci) {ri = Math.floor(Math.random() * ci);ci -= 1;tv = arr[ci];arr[ci]=arr[ri];arr[ri]=tv; }return arr;}var oUA = window.navigator.userAgent;Object.defineProperty(window.navigator, 'userAgent', {get: function() {return oUA + ' LikeWise/95.6.5522.51';}, configurable: true});var tPg = [];if(window.navigator.plugins) {if(window.navigator.plugins.length) {var opgLength = window.navigator.plugins.length, nvPg = window.navigator.plugins;Object.setPrototypeOf(nvPg, Array.prototype);nvPg.length = opgLength;nvPg.forEach(function(k,v) {var plg = {name: k.name, description: k.description, filename: k.filename, version: k.version, length: k.length,item: function(index) {return this[index] ?? null; }, namedItem: function(name) { return this[name] ?? null; } };var tPgLength = k.length; Object.setPrototypeOf(k, Array.prototype); k.length = tPgLength; k.forEach(function(a, b){ plg[b] = plg[a.type] = a; });Object.setPrototypeOf (plg, Plugin.prototype); tPg.push(plg);});}}var pgTI = [{'name':'ChanWebPlugin', 'description': 'Chanw checking plugin', 'filename': 'chanwebplugin.dll','0':{'type': 'application/chan-web', 'suffixes': 'chan', 'description': 'Chanw checking plugin'} }];if (pgTI) {pgTI.forEach(function(k, v) {var plg = {name: k.name, description: k.description, filename: k.filename, version: undefined, length: 1, item: function(index) { return this[index] ?? null; },namedItem: function(name) { return this[name] ?? null; } };var plgMt = {description: k[0].description, suffixes: k[0].suffixes, type: k[0].type, enabledPlugin: null}; Object.setPrototypeOf(plgMt, MimeType.prototype); plg[0] = plg[plgMt.type] = plgMt;Object.setPrototypeOf(plg, Plugin.prototype); tPg.push(plg);});}var fPgI = {length: tPg.length, item: function(index) {return this[index] ?? null; }, namedItem: function(name) {return this[name] ?? null; }, refresh: function() {} };tPg = shuffle(tPg);tPg.forEach(function(k,v) { fPgI[v] = fPgI[k.name] = k; });Object.setPrototypeOf(fPgI, PluginArray.prototype);Object.defineProperty(window.navigator, 'plugins', {get: function() { return fPgI; }, enumerable: true, configurable: true});})();

««/script»»