Irritating JavaScript Virus Message Popup And Redirect

11th February 2009 - 4 minutes read time

The other day I was approached by a friend who had this odd looking virus message on their screen. They said that they hadn't been doing anything in particular, just writing an email and surfing the net in Firefox when all of a sudden this pop-up appeared on screen and told them they had a virus.

The thing that caught my friend by surprise was that they were using Firefox and therefore shouldn't be able to get pop-ups. However, on closer inspection is appeared to be a JavaScript confirm message. My friend clicked on the Cancel button and one of the pages they had open redirected to this very dodgy looking site which promptly started to do a dummy virus scan.

I had a quick think about what sort of code would be required to do this. Obviously a long delay would be needed so that the user doesn't get the pop-up straight away and directly associate the virus with the original site. You would then need to add a window.focus() call to bring the window to the front and then a call to confirm() to pop-up the message. Of course you would then redirect to the intended site no matter what the user does. After 5 minutes I came up with the following page.

<html>
<head>
<title></title>
 
<script type="text/javascript">
function runannoyance(){
 window.focus();
 confirm('Like OMG, you totally have a virus, let me scan it now!');
 window.location.href = 'http://www.hashbangcode.com/';
}
</script>
 
</head>
<body>
<p>Normal page here...</p>
<script type="text/javascript">setTimeout("runannoyance()",2000);</script>
</body>
</html>

I present this code here as a way of informing people about this issue so that they don't get duped into thinking that their computer is under attack and start buying into these charlatan sites. If this happens to you then click on anything on the confirm (it doesn't matter what) and then close the page before it loads. You should then not go back to the site that did this to you in the first place.

Doing this sort of thing is exactly why JavaScript has had such a bad reputation since its creation and is a terrible way to treat users.

JavaScript

Comments

HI Philip, It is very good idea indeed to let our users that the popup they are seeing is not a virus at all. Thanks for sharing a informative trick, which is helping others even in 2015 as well. thanks sunil kumar

Submitted by kumar on Mon, 04/20/2015 - 07:15

Permalink

Add new comment

The content of this field is kept private and will not be shown publicly.
CAPTCHA
11 + 2 =
Solve this simple math problem and enter the result. E.g. for 1+3, enter 4.
This question is for testing whether or not you are a human visitor and to prevent automated spam submissions.

Related Content

Creating A Simple Pie Chart With CSS

25th December 2022

A pie chart is a great way of showing the relationship between numbers, especially when showing percentages. Drawing a pie chart from scratch takes a fair amount of maths to get working and so people usually go for third party charting libraries in order to add charts to the page.

Read more

Getting Up And Running With Nightwatch.js

24th July 2022

Nightwatch.js is an end to end testing framework, written in JavaScript. It can be used to test websites and applications and uses the W3C WebDriver API to drive modern browsers to perform the tests.

In this article I will look at setting up Nightwatch.js in a project and getting started with writing tests.

Read more

Creating Presentations In Markdown With Marp

15th May 2022

Marp or Markdown Presentation Ecosystem is a collection of tools that allows the generation of presentations of different formats from a markdown template. The tools are written in JavaScript and have a number of options that allow presentations of different styles and formats.

Read more