Strange page of text upon loading webpages

Zimboombafoo

Level 1
Thread author
Verified
Apr 29, 2014
54
Hi, so 2-3 months back I started getting this random page of text that would pop up (it's not a seperate page, it just happens on the browser page) for about 1 second (it's literally that quick) after going to a webpage or refreshing one every once in a while (maybe a couple times a day if that)..it covers the entire webpage and it just looks like a white page with black text with random letters/numbers covering the whole page. After about a second it vanishes and the page loads as normal...now it stopped doing this for a few weeks and then came back about a month ago...but now it only shows up when I'm on facebook and only when I'm on one of my two accounts...it doesn't show up on any other website now and it doesn't show up when I'm on my main facebook account...only my alternative one. It also ONLY appears when going to certain peoples profiles. It literally pops up and disappears so quickly I don't have time to examine it or screenshot it. I use Chrome and run the ghostery and adblockplus addons...however, when I disable them the problem remains. I've also uninstalled and reinstalled Chrome. Does anyone have any idea what this is or how to fix it? Thanks so much.

Edit: I downloaded Opera to see if it happened on a different browser..and it is.

Edit 2: I managed to halt the page during the pop up. it is just a white page and here is the text:
 
Last edited:

Zimboombafoo

Level 1
Thread author
Verified
Apr 29, 2014
54
I ran TDSSKiller and it did not find any threats, here is the log.
May I ask why you had me reset the router?
 

Zimboombafoo

Level 1
Thread author
Verified
Apr 29, 2014
54
the original problem is still there, i'm wondering if it's maybe not a malware problem? i'm not sure what it is or what to do...
 

Zimboombafoo

Level 1
Thread author
Verified
Apr 29, 2014
54
I am running Adblock Plus and Ghostery on chrome..but I downloaded opera the other day to see if it occured there and it happens on that browser too.
 

Zimboombafoo

Level 1
Thread author
Verified
Apr 29, 2014
54
no, it only occurs on one of my two facebook accounts when i go to certain peoples profiles. i click their name to go to their profile and for about a split second a white page with black text appears and then disappears and then the profile appears as normal. i managed to hit "stop loading this page" during the "pop up" and as I copied and pasted initially, this is what it appears as.
 
Last edited:

Zimboombafoo

Level 1
Thread author
Verified
Apr 29, 2014
54
you completely hijacked my thread and now the original person helping me has vanished. you have done nothing but jump around and made me 10x more confused than before. please stop
 
Last edited:

Anupam

Level 21
Verified
Well-known
Jul 7, 2014
1,017
Can you post some screenshots so that we can have a look and check if we can help?
 
  • Like
Reactions: frogboy

frogboy

In memoriam 1961-2018
Verified
Top Poster
Well-known
Jun 9, 2013
6,720
Yes please post some screenshots so we can have an idea about what is going on with your PC. Thanks.
 

Zimboombafoo

Level 1
Thread author
Verified
Apr 29, 2014
54
sorry I deleted the initial text from the pop up I made the thread about because I thought the thread was pretty much over (thread got moved to a different forum). I didn't know how to screenshot it (not that computer savvy) but it was just a white page with black text that appears for like a split second and then vanishes when I go to certain peoples profiles on facebook occasionally..I managed to stop the page from loading when it pop'd up yesterday and I copied the text and this is how it appears:

kbG":{"type":"js","crossOrigin":1,"src":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/yI\/r\/dxzlY_JXlO2.js"},"ge0OI":{"type":"css","permanent":1,"crossOrigin":1,"src":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/yG\/r\/cIVQ7_V6Fiv.css"},"VhRBk":{"type":"js","crossOrigin":1,"src":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/yN\/r\/pc9in0IPnJ1.js"},"VDymv":{"type":"css","permanent":1,"crossOrigin":1,"src":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/yW\/r\/V00-AnCtiR3.css"},"rqGCm":{"type":"css","permanent":1,"crossOrigin":1,"src":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/ym\/r\/_4Sk0OyYN3m.css"},"QMjhY":{"type":"js","crossOrigin":1,"src":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/yE\/r\/lRELHs__Isc.js"},"3hBYd":{"type":"js","crossOrigin":1,"src":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/yv\/r\/84QIRKzCnzp.js"},"wxq+C":{"type":"js","crossOrigin":1,"src":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/ys\/r\/6QvdZ6KuzBm.js"},"Rs18G":{"type":"js","crossOrigin":1,"src":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/yI\/r\/iqqxHqHkZcL.js"},"6AU0l":{"type":"js","crossOrigin":1,"src":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/yX\/r\/uAtB4Wsl2Sl.js"},"AtxWD":{"type":"js","crossOrigin":1,"src":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/yG\/r\/J74KdXozsKP.js"},"zyFOp":{"type":"js","crossOrigin":1,"src":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/yT\/r\/Ri9nQJbah9T.js"}});if (true) {Bootloader.enableBootload({"React":{"resources":["YICz5","JtyCr"],"module":true},"ExceptionDialog":{"resources":["JtyCr","BqQay","YICz5","r+ckK","F5aqA","fE\/se","BANJS","M2Jox","q+j1N","20549"],"module":true},"AsyncDOM":{"resources":["JtyCr","cAkXN"],"module":true},"ConfirmationDialog":{"resources":["JtyCr","r+ckK","oE4Do"],"module":true},"Dialog":{"resources":["JtyCr","YICz5","r+ckK","F5aqA","QV2wP"],"module":true},"ErrorSignal":{"resources":["JtyCr","cNca2"],"module":true},"Event":{"resources":["JtyCr"],"module":true},"AsyncDialog":{"resources":["JtyCr","BqQay","YICz5","r+ckK","F5aqA"],"module":true},"AsyncRequest":{"resources":["JtyCr"],"module":true},"DialogX":{"resources":["JtyCr","BqQay","YICz5","r+ckK","F5aqA"],"module":true},"XUIDialogTitle.react":{"resources":["YICz5","JtyCr","r+ckK","fE\/se","F5aqA","BANJS"],"module":true},"XUIDialogBody.react":{"resources":["YICz5","JtyCr","F5aqA","fE\/se"],"module":true},"XUIDialogButton.react":{"resources":["YICz5","JtyCr","fE\/se","r+ckK","F5aqA"],"module":true},"XUIDialogFooter.react":{"resources":["YICz5","JtyCr","r+ckK","fE\/se","F5aqA"],"module":true},"XUIGrayText.react":{"resources":["YICz5","JtyCr","F5aqA","fE\/se","q+j1N"],"module":true},"PhotoSnowlift":{"resources":["7O5+\/","JtyCr","YICz5","r+ckK","F5aqA","QV2wP","oxkbG","BqQay","fE\/se"],"module":true},"PhotoTagger":{"resources":["JtyCr","M2Jox","r+ckK","YICz5","F5aqA","QV2wP","oxkbG","BqQay","fE\/se","BANJS"],"module":true},"Live":{"resources":["JtyCr","cAkXN"],"module":true},"PhotoTagApproval":{"resources":["JtyCr","oxkbG","M2Jox"],"module":true},"PhotoTags":{"resources":["JtyCr","oxkbG","r+ckK","M2Jox"],"module":true},"TagTokenizer":{"resources":["JtyCr","fE\/se","F5aqA","ge0OI","VhRBk","M2Jox","r+ckK","fmS14"],"module":true},"css:fb-photos-snowlift-fullscreen-css":{"resources":["VDymv"]},"SnowliftPicCropper":{"resources":["JtyCr","YICz5","r+ckK","F5aqA","QV2wP","M2Jox","oxkbG","rqGCm","QMjhY","3hBYd","wxq+C"],"module":true},"PhotosButtonTooltips":{"resources":["JtyCr","r+ckK","YICz5","F5aqA","Rs18G"],"module":true},"VideoRotate":{"resources":["JtyCr","YICz5","r+ckK","F5aqA","QV2wP","6AU0l"],"module":true},"AsyncResponse":{"resources":["JtyCr"],"module":true},"PhotoPermalinkCropper":{"resources":["JtyCr","YICz5","r+ckK","F5aqA","QV2wP","M2Jox","oxkbG","rqGCm","7O5+\/","BqQay","fE\/se","BANJS","QMjhY","3hBYd"],"module":true},"PhotoInlineEditor":{"resources":["JtyCr","7O5+\/","YICz5","r+ckK","oxkbG","BqQay","M2Jox","F5aqA","QV2wP","fE\/se","BANJS","VhRBk","ge0OI","fmS14","AtxWD"],"module":true},"Form":{"resources":["JtyCr","r+ckK"],"module":true},"SpotlightShareViewer":{"resources":["JtyCr","BqQay","zyFOp"],"module":true},"Toggler":{"resources":["JtyCr","r+ckK","YICz5","F5aqA"],"module":true},"Tooltip":{"resources":["JtyCr","r+ckK","YICz5","F5aqA"],"module":true},"DOM":{"resources":["JtyCr"],"module":true},"Input":{"resources":["JtyCr","r+ckK"],"module":true},"trackReferrer":{"resources":[],"module":true},"DimensionTracking":{"resources":["JtyCr","BqQay"],"module":true},"HighContrastMode":{"resources":["JtyCr","BqQay"],"module":true},"DetectBrokenProxyCache":{"resources":["JtyCr","BqQay"],"module":true},"TimezoneAutoset":{"resources":["JtyCr"],"module":true},"DimensionLogging":{"resources":["eoIEn","JtyCr"],"module":true},"DOMScroll":{"resources":["JtyCr","YICz5"],"module":true},"PhotoViewer":{"resources":["JtyCr","oxkbG"],"module":true},"ScrollableArea":{"resources":["JtyCr","YICz5","F5aqA","fE\/se"],"module":true},"PrivacyLiteFlyout":{"resources":["JtyCr","YICz5","BqQay","r+ckK","F5aqA","QV2wP","B1Ziu","lf0C1"],"module":true},"FacebarTypeaheadNavigation":{"resources":["JtyCr","r+ckK","sKL4f"],"module":true},"FacebarTypeaheadDecorateEntities":{"resources":["JtyCr","sKL4f"],"module":true},"FacebarTypeaheadDisambiguateResults":{"resources":["JtyCr","4MPYz","YICz5","r+ckK","F5aqA","QV2wP","fE\/se","sKL4f","lf0C1"],"module":true},"FacebarTypeaheadSeeMoreSerp":{"resources":["JtyCr","sKL4f","YICz5","lf0C1"],"module":true},"FacebarTypeaheadSizeAdjuster":{"resources":["JtyCr","sKL4f","QV2wP"],"module":true},"FacebarTypeaheadShortcut":{"resources":["JtyCr","sKL4f"],"module":true},"FacebarTypeaheadQuickSelect":{"resources":["JtyCr","sKL4f"],"module":true},"FacebarTypeaheadAutoWidth":{"resources":["JtyCr","lf0C1","sKL4f"],"module":true},"FacebarTypeaheadMagGo":{"resources":["JtyCr","fE\/se","sKL4f"],"module":true},"FacebarTypeaheadSelectAll":{"resources":["JtyCr","sKL4f"],"module":true},"FacebarTypeaheadPrefixLengthOrderedCache":{"resources":["sKL4f"],"module":true},"FacebarTypeaheadRecorderBasic":{"resources":["JtyCr","YICz5","B1Ziu","sKL4f"],"module":true},"FacebarTypeaheadHashtagResult":{"resources":["B1Ziu","536Ra","fE\/se","JtyCr","sKL4f"],"module":true},"FacebarTypeaheadCore":{"resources":["JtyCr","YICz5","Nm4nS","sKL4f","B1Ziu","r+ckK","lf0C1","4MPYz"],"module":true},"FacebarTypeaheadView":{"resources":["JtyCr","r+ckK","YICz5","4MPYz","F5aqA","fE\/se","sKL4f","lf0C1","QV2wP","fmS14"],"module":true},"FacebarDataSource":{"resources":["JtyCr","B1Ziu","fE\/se","sKL4f","YICz5","4MPYz","536Ra","r+ckK"],"module":true},"FacebarTypeahead":{"resources":["JtyCr","F5aqA","fmS14","sKL4f"],"module":true}});}}); requireLazy(["ix"], function(ix) {ix.add({"\/images\/messaging\/docs\/generic.png":{"sprited":true,"spriteMapCssClass":"sp_MXzTRXPhpG1","spriteCssClass":"sx_e744cb"},"\/images\/loaders\/indicator_blue_large.gif":{"sprited":false,"uri":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/y9\/r\/jKEcVPZFk-2.gif","width":32,"height":32},"\/images\/loaders\/indicator_blue_medium.gif":{"sprited":false,"uri":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/yk\/r\/LOOn0JtHNzb.gif","width":16,"height":16},"\/i
mages\/loaders\/indicator_blue_small.gif":{"sprited":false,"uri":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/yb\/r\/GsNJNwuI-UM.gif","width":16,"height":11},"\/images\/loaders\/indicator_white_large.gif":{"sprited":false,"uri":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/yG\/r\/b53Ajb4ihCP.gif","width":32,"height":32},"\/images\/loaders\/indicator_white_small.gif":{"sprited":false,"uri":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/y-\/r\/AGUNXgX_Wx3.gif","width":16,"height":11},"\/images\/loaders\/indicator_black.gif":{"sprited":false,"uri":"https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/v2\/y7\/r\/pgEFhPxsWZX.gif","width":32,"height":32}});});
 

frogboy

In memoriam 1961-2018
Verified
Top Poster
Well-known
Jun 9, 2013
6,720
It looks like the code to run Facebook. But i am not sure how to stop it . Hopefully someone smarter than me will help you out.
 

Zimboombafoo

Level 1
Thread author
Verified
Apr 29, 2014
54
yea, i was wondering the same thing..the part I find strange is that i didn't encounter this until a couple months ago and it continues to happen (even on different browsers)...but only on one of my facebook accounts. I also can't find anything, anywhere about it happening to anyone else.
 

frogboy

In memoriam 1961-2018
Verified
Top Poster
Well-known
Jun 9, 2013
6,720
On the same PC but only one FB account it does sound strange.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top