Googleapis.com взломан?
Как известно хост ajax.googleapis.com является CDN-хостингом для множества библиотек, в том числе и jQuery. И вот сегодня обращается знакомый, который говорит, что при заходе на его сайт Yandex Safe Browsing сильно ругается и рекомендует не посещать, внезапно ставший опасным сайт.
Ссылка на сайт сразу же отправилась в онлайн антивирус и в анализатор кода сайта. И вот что выяснилось.
А выяснилась простая вещь, что сам сайт не заражен. Вирусного кода нет ни в коде страниц, также на самом хосте отсутствуют модификации каких либо скриптов или подгруженных файлов. .htaccess также девственно пуст.
При этом из внешних ссылок на сайте присутствуют только ссылки на пару счетчиков и на пресловутую библиотеку jQuery хостящуюся на ajax.googleapis.com. И вот с ней то как раз и проблема.
Вот что выдал уже Google Safe Browsing про свой же собственный сайт:
Произошло во время последнего посещения этого сайта компанией Google?
На 0 из 10 страниц сайта, протестированных нами за последние 90 дней, происходила загрузка и установка вредоносного ПО без согласия пользователя. Последнее посещение этого сайта системой Google произошло 2012-03-18; последний раз подозрительный контент был обнаружен на этом сайте 2012-03-18.
Вредоносное ПО включает 44 scripting exploit(s), 29 exploit(s), 1 trojan(s).
Сетей, в которых размещался этот сайт: 8 (в том числе AS15169 (Google Internet Backbone), AS9318 (HANARO), AS23338 (DCS)).
Был ли этот сайт промежуточным звеном в дальнейшем распространении вредоносного ПО?
По всей видимости, за последние 90 дней сайт ajax.googleapis.com использовался в качестве промежуточного звена для заражения других сайтов. Число зараженных сайтов: 6 (в том числе interkambio.com/, laisla.com.co/, animetoplist.org/).
Размещалось ли на этом сайте вредоносное ПО?
Да. За последние 90 дней на этом сайте размещалось вредоносное ПО. Число зараженных им доменов: 8 (в том числе pumpthebeat.com/, trackingvinceyoung.com/, by-murat.at/)
Подробнее и со ссылками можно посмотреть здесь.
Как видно сейчас сайт уже вылечен.
Но куча сайтов с которых идет обращение к jQuery (другие библиотеки не смотрел) на ajax.googleapis.com до сих пор блокируются Яндексом.
Гуглинг, яндексинг ничего не дал о подробностях взлома или проблемы. Есть у кого-то догадки или подробности?
googleapis.com что это?
Хост ajax.googleapis.com является CDN-хостингом для множества библиотек.
На страницах твоего сайта испорльзуются бибиотеки jQuery или аналогичные ?
Такие строчки в исходном коде страниц присутствуют ?
<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.5.1/jquery.min.js"></script>
Это не посетители, это подгрузка библиотек из гугловского репозитария.
Remove storage.googleapis.com Virus Completely
Storage.googleapis.com is redirect virus downloaded to your system by ad-supported program which pretends to be a useful web browser plugin that offers users with the latest coupons, lower prices and discounts information. It claims that it enhance your online shopping experience and help you save money and time, however, our PC experts research and find that storage.googleapis.com only displays customized ads based on the personal online data and information it collects from you silently. It is able to track your web browser statics to get information like mostly viewed pages, search queries, IP address and even your accounts details stored on browser. By collecting these information, storage.googleapis.com shares with its partners so that they show ads that you may be interested in, then it can make you purchase something on third party sites which may be hosted spammers. storage.googleapis.com will displays annoying spam ads every time you surf the web, and it installs other malware infections without permission. Leaving storage.googleapis.com on your computer is risky, we strongly advise you to remove it in time.
storage.googleapis.com random popup ads
storage.googleapis.com is mainly bundled with other free programs in one installer or packager, which are embedded with Spyware, PUP, browser hijackers, and other rogueware. As soon as invading your PC, storage.googleapis.com installs various malware at the same time without approval. It hijacks your web browser and installs nasty extension or addon to generate unwanted ads. Though the ads by storage.googleapis.com look like good thing that save your money, you’d better not clicking on any of them since it may contain potential threats. If you do not want more viruses to be transferred to your system, you should not hesitate to delete Storage.googleapis.com from your PC as quickly as possible. Please follow storage.googleapis.com removal instructions below to get rid of storage.googleapis.com and other malicious programs.
Storage.googleapis.com is Extremely Dangerous
- It communicates with hackers and steals your confidential data.
- It drops lots of adware and spyware onto your PC.
- It hijacks your browser and changes its default settings.
- It seriously degrades the PC performance.
Steps for Removing storage.googleapis.com Virus
storage.googleapis.com Manual Steps ( Experienced and skilled computer users can use this advanced Manual Removal method )
Step One . End malicious process related with storage.googleapis.com
Step Two . Remove unwanted plug-in related with storage.googleapis.com from Chrome, Firefox, IE and Microsoft Edge browser.
Step Three. Uninstall all Potentially Unwanted Programs related with storage.googleapis.com
Step Four. Find and delete all harmful registry files generated by storage.googleapis.com
storage.googleapis.com Automatic Steps (Good and easy for most of PC users to delete storage.googleapis.com )
Step One . Install SpyHunter to remove storage.googleapis.com virus and other hidden threats.
Step Two . Install RegHunter to fix all damaged registry files and make up the security exploits.
Step Three. Download and install Avast Internet Security 2015 to re-scan threats and protect your PC For Free
(Optional Step). Clean up all malicious codes and cookies of storage.googleapis.com from Chrome, Firefox, IE and Microsoft Edge.
Manual Steps ( Experienced and skilled computer users can use this advanced Manual Removal method )
Step One . End malicious process related with storage.googleapis.com.
1. Open Windows Task Manager by pressing Ctrl + Shift + Esc keys together:
2. Find out the process related with storage.googleapis.com and click End Process:
Step Two. Remove unwanted plug-in related with storage.googleapis.com from Chrome, Firefox, IE and Microsoft Edge browser.
On Chrome
- Click the Chrome menu
on the browser toolbar. - Click Tools.
- Select Extensions.
- Click the trash can icon
to delete storage.googleapis.com extension. - Make sure to remove all extensions you do not know or need.
- A confirmation dialog appears, click Remove.
On Firefox
- Click the menu button
and choose Add-ons. The Add-ons Manager tab will open. - In the Add-ons Manager tab, select the Extensions panel.
- Make sure to remove all extensions you do not know or need.
- Click Disable or Remove button of storage.googleapis.com.
- Click Restart now if it pops up.
On Internet Explorer
- Open the IE, click the Tools button
, and then click Manage add-ons. - Click Toolbars and Extensions on left side of the window., and then select storage.googleapis.com
- Make sure to remove all BHO’s you do not know or need.
- If the add-on can be deleted, you’ll see the Remove option. Click Remove and then click Close. Otherwise click Disable button.
On Microsoft Edge
(Microsoft Edge browser still does not have extensions settings. Now we only need to reset search engine and homepage to keep web browser hijacker away from the browser)
1. Reset your default search engine to remove search engine hijacker virus.
- Select More (…) on the address bar, then Settings
- Click View advancedsettings
- Click <Add new> under “Search in the address bar with”, then input the search engine you like
- Now select the search engine you like and click Add as default
- Select More (…) on the address bar, then Settings
- Under Open with, select A specific page or pages
- select Custom to enter the URL of page you want to set as homepage
Step Three. Uninstall all Potentially Unwanted Programs related with storage.googleapis.com
1. Open Control Panel window.
Win 10 user – Right-click on the Windows Start button and choose “Control Panel” from the pop-up menu.
Win 8 user – Open the Settings Charm Bar by pressing Windows key 
+ I key on your keyboard at the same time, then click on the Control Panel option
Win 7 / Vista / XP user – Click on the Start button to open your Start Menu, then Click Control Panel
2. In Control Panel, click on Uninstall a program under the Programs category
3. In the Programs and Features window, click Installed On to display the latest programs, scroll through the list to seek and uninstall Storage.googleapis.com and other unwanted and unfamiliar programs that look suspicious.
Step Four. Find and delete all harmful registry files generated by storage.googleapis.com
1. Call out the Run window by pressing Windows + R keys together, and then type regedit and hit Enter key :
2. Find out and remove all harmful registry files related with storage.googleapis.com virus listed below:
( You may not be able to find out all files listed below as the virus keeps changing its files with name and path. )
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain “Default_Page_URL”
Automatic Steps (Good and easy for most of PC users to delete storage.googleapis.com )
Step One. Install SpyHunter to remove storage.googleapis.com virus and other hidden threats.
1. Click this link: “ Download SpyHunter” or the blue button below to download SpyHunter safely:
Tips: After SpyHunter is downloaded, your Chrome /Firefox /IE may display such fake security warning ” This type of file can harm your computer. Do you want to keep Download_Spyhunter-Installer.exe anyway?”, which is generated by virus to cheat you, please just ignore the fake warning and click “ Keep ” button.
(Notes – If you do not need it any more, please follow instructions on SpyHunter uninstall. SpyHunter`s free version provides unlimited free scans and detection. After it detects malicious files, processes and registry entries, you can follow the scan results to manually locate and remove them on your own; or to purchase its full version to automatically remove the virus with ease. Meanwhile, the full version of SpyHunter will offers you unlimited one-on-one professional help for any malware related issue by its official PC expert.)
2. Once downloaded, please double-click SpyHunter-Installer.exe to start the installation of SpyHunter.
3. When SpyHunter is installed, it will be run automatically, then click Scan Computer Now to detect storage.googleapis.com related threats:
4. Once SpyHunter completes the scan, please click Fix Threats to get rid of storage.googleapis.com.
Step Two. Install RegHunter to fix all damaged registry files and make up the security exploits.
1. Click this link: “ Download RegHunter” or the blue button below to download RegHunter safely:
Tips: After RegHunter is downloaded, your Chrome /Firefox /IE may display such fake security warning “ This type of file can harm your computer. Do you want to keep Download_Reghunter-Installer.exe anyway? “, which is generated by virus to cheat you, please just ignore the fake warning and click “ Keep ” button.
Notes – If you do not need it any more, please follow instructions on RegHunter uninstall. RegHunter`s free version provides unlimited free scans and detection. After it detects corrupted registry files and system errors files, you can follow the scan results to manually replace them with healthy files copied from healthy PC on your own; or to purchase its full version to automatically fix the Registry and errors with ease. Meanwhile, the full version of RegHunter will offers you great features to optimize your system performance.)
2. Once downloaded, then double-click RegHunter-Installer.exe to start the installation of RegHunter.
3. When RegHunter is installed, it will be run automatically, then click Scan for Registry Errors Now! to detect files corrupted by storage.googleapis.com:
4. Once RegHunter completes the scan, please click Repair All Errors to solve security bugs related with storage.googleapis.com.
Step 3. Download and install Avast Internet Security 2015 to re-scan threats and protect your PC For Free
Avast Internet Security 2015 provides 60 Days free trail for you, it’s highly recommended to download and install it to re-scan your system and secure everything in your machine. You can uninstall it when you do not need it any more, it is 100% free . Click the button below to Download Free Avast Internet Security 2015 and enjoy 60 days of premium protection for free.
(Optional Step). Clean up all malicious codes and cookies of storage.googleapis.com from Chrome, Firefox, IE and Microsoft Edge.
– Clean up cache and cookies by resetting Chrome
1. Open Chrome, then click “Customize and control Google Chrome” button, and then click on Settings
2. Under the Chrome Settings page, scroll down to the bottom, then click on Show advanced settings button
3. After clicking on Show advanced settings button, scroll down to the bottom and click on Reset browser settings button
4. A message box will pop up to inform that your browser settings will be restored to their original defaults, click Reset button when it appears:
– – Clean up cache and cookies by resetting Firefox
1. Open Firefox, then click on Firefox button, then Click on Help button, then Click on Troubleshooting Information
2. At the Troubleshooting Information page, click on Reset Firefox
3. A message box will pop up to let you confirm that you want to reset Firefox to its initial state, click Reset Firefox button when it appears:
– – Clean up cache and cookies by resetting IE
1. Open Internet Explorer, then click on Tools, then click on Internet Options
2. On the Internet Options window: click on Advanced tab, then click Reset button
3. A message box will pop up to let you confirm that you want to reset all Internet Explorer Settings, click Reset button when it appears:
4. When the resetting process is done, you’ll see this message box, click Close
5. You’ll need to restart your Internet Explorer to complete the resetting process.
– Clean up cache and cookies on Microsoft Edge
1. Select More (…) on the address bar, then Settings:
2. click “Choose what to clear”:
3. Check the first three options and then click Clear:
If you have done each step above accurately, you can get rid of storage.googleapis.com virus completely. Hope you can solve the issue and get your healthy computer back. Good luck ��
storage.googleapis.com virus is mainly spread online through resources such as Free Software, Spam Email and Porn Websites. To avoid virus and malware like storage.googleapis.com infect your computer again, you should keep these tips in your mind:
1. Always select Advance or Custom Install if you want to install any free software;
2. Scan all attached files of emails you receive, even the emails sent from Contacts;
3. It’s best not to visit porn websites, which are often hosted by cyber criminal and they may harm your system severely.
Update.googleapis.com (Free Instructions) — Removal Guide
Update.googleapis.com is the website used as a service that shows available updates. Update.googleapis.com (alternatively Googleapis.com) is a website that Avast and AVG antivirus engines detect as dangerous. However, there are a few issues that can be caused by this website itself if the detection is not falsely positive. This is NOT a virus, although many users report about this suspicious detection and errors or alerts in online community forums like Reddit or Quora. [1]
The main issue with the website is the question is this a malicious Googleapis.com virus or not. The domain is legitimate and used to see if any updates are available. It is a common problem appearing on various systems and mostly associated with the Google Chrome browser but can be fixed by clearing the web browser's cache or updating AV engine.
| Name | Googleapis.com, Update.googleapis.com |
|---|---|
| Main issue | Indicated as a phishing site or malicious |
| Indicated by | AVG and Avast antivirus engines |
| Fix | Update the version of your AV program, get a different tool, change settings on the browser, clear cache or cookies |
| Automatic system cleaning | Use Fortect Intego for the thorough system cleaning and eliminating possible threats. This way you can see if there is any real intruders besides false Update.googleapis.com indication. |
It is the legitimate domain that belongs to Google, and various googleapis websites get blocked by Avast antivirus engine. This is frustrating for the user because the message ” connection to Update.googleapis.com has been aborted because of URL:Phising” raises a lot of questions.
Your device is, in most cases, not affected by any virus even when the alert about Googleapis.com phishing site appears continuously. To stop these errors, you should either update the version of your AVG or Avast programs or get a different antivirus tool.
Avast security tool support team even reports online about this issue with Update.googleapis.com detection:
This was an issue that was quickly resolved; all you need to do is update Avast and you should be all set.
Update.googleapis.com is a legitimate website that gets falsely indicated as the page that uses phishing. [2] However, there is a possibility that malicious actors use the name of a known domain to proliferate on targeted systems and perform unwanted activities like pop-up advertisements or redirects to generate traffic for commercial content creators.
For that reason get Fortect Intego or another program and scan the system to see if Update.googleapis.com is indicated as malicious by other tools too. If not, it is a problem with the AV engine that showed the false message in the first place.
When the site gets marked as harmful, you can also remove Googleapis.com using the same antivirus program. This way you also get to clean the machine thoroughly and delete other indicated threats.
You can try to fix the issue with repeatedly appearing Update.googleapis.com alerts by:
- Updating your AV engine;
- Updating the browser;
- Clearing Cache and Cookies;
- Adding a new user on Chrome;
- Resetting the Chrome to default;
- Using Incognito mode;
- Cleaning extensions and add-ons.
Remember that Googleapis removal is needed either way when the alert is false or right because this behavior affects the performance of the PC. You need to clean the device entirely and update your programs using official sources or reputable providers to avoid any similar issues or even cyber infections.
Update.googleapis.com virus is called like that by users online because of the suspicious detection result but this is NOT a virus.
Most common malware spreading techniques
Cyber threats can be categorized as potentially unwanted programs, trojans or even ransom-demanding malware. However, each type has its distribution methods. Websites that have similar names to legitimate domains, most often get used to delivering pop-up ads and other intrusive commercial content in the form of banners, redirects. The technique used to deliver this type of threats is called software bundling. [3]
It means that when you download freeware from the internet or the promotional advertisement, a deceptive website you get a bundle where PUPs get packed alongside needed software or applications. Then potentially unwanted program makes your browser deliver more content with the purpose of creating views and generating money.
Researchers [4] advise choosing reputable sources, official providers or developers as your default place to get programs. Opting for Advanced or Custom installations also give you the best experience during the process because this method allows you to de-select bundled applications from the list.
Get rid of Update.googleapis.com and forget about errors and alerts
The best tip for Update.googleapis.com removal is getting a trustworthy anti-malware tool and scanning the system thoroughly to indicate all harmful programs or files that may cause real issues on your machine. Although the indication is possibly false and there is nothing wrong with the website itself, you need to check the system additionally.
Get an anti-malware tool like Fortect Intego , SpyHunter 5 Combo Cleaner , or Malwarebytes and remove Googleapis.com from the computer or any other PUPs and malware programs. This way you can be sure that any alerts about the infected system are false in the future.
For fake phishing googleapis alert fix, you may need to check the browser settings on your Google Chrome manually. In most cases, this browser is the one that gets affected or needs some additional work. You can try reinstalling Google Chrome or setting the browser to default, clearing all the extensions and add-ons.