Wednesday September 8th, 2010  |    Leave a comment

You may can try to search on google such following string:

var LEO_HIGHLIGHTS_INFINITE_LOOP_COUNT = 300; var LEO_HIGHLIGHTS_MAX_HIGHLIGHTS = 50;

There are many websites are having these text without knowing where it’s coming from and how to solve, here I met this issue at my colleague’s PC while editing Confluence page and finally I found the issue as I have already experienced with “Site Advisor” recently.

Now it’s “The Browser Highlighter” add-on again!

Firefox Addon Highlighter is kind of a malware

Firefox Addon Highlighter is kind of a malware

The issue may found when:

Browser Highlighter Installing from FireFox Addon

Browser Highlighter Installing from FireFox Addon

Firefox Addon Highlighter is a malware from Ebay?

Firefox Addon Highlighter is a malware from Ebay?

  • The Browser Highlighter v1.0.19126 (eBay Inc. – from this company?)
  • Open a richeditor, in my case: using Confluent page
  • Write something on the page
  • Click Save, you need to wait for a bit time as the add-on is being adding the malware text
  • Here is the example text added to the footer of the document:
Confluence Editor Attached by The Browser Highlighter Add-on

Confluence Editor Attached by The Browser Highlighter Add-on

var LEO_HIGHLIGHTS_INFINITE_LOOP_COUNT = 300; var LEO_HIGHLIGHTS_MAX_HIGHLIGHTS = 50; var LEO_HIGHLIGHTS_IFRAME_TOP_ID = “leoHighlights_top_iframe”; var LEO_HIGHLIGHTS_IFRAME_BOTTOM_ID = “leoHighlights_bottom_iframe”; var LEO_HIGHLIGHTS_IFRAME_DIV_ID = “leoHighlights_iframe_modal_div_container”; var LEO_HIGHLIGHTS_IFRAME_TOTAL_COLLAPSED_WIDTH = 520; var LEO_HIGHLIGHTS_IFRAME_TOTAL_COLLAPSED_HEIGHT = 391; var LEO_HIGHLIGHTS_IFRAME_TOTAL_EXPANDED_WIDTH = 520; var LEO_HIGHLIGHTS_IFRAME_TOTAL_EXPANDED_HEIGHT = 665; var LEO_HIGHLIGHTS_IFRAME_TOP_POS_X = 0; var LEO_HIGHLIGHTS_IFRAME_TOP_POS_Y = 0; var LEO_HIGHLIGHTS_IFRAME_TOP_WIDTH = 520; var LEO_HIGHLIGHTS_IFRAME_TOP_HEIGHT = 294; var LEO_HIGHLIGHTS_IFRAME_BOTTOM_POS_X = 96; var LEO_HIGHLIGHTS_IFRAME_BOTTOM_POS_Y = 294; var LEO_HIGHLIGHTS_IFRAME_BOTTOM_COLLAPSED_WIDTH = 425; var LEO_HIGHLIGHTS_IFRAME_BOTTOM_COLLAPSED_HEIGHT = 97; var LEO_HIGHLIGHTS_IFRAME_BOTTOM_EXPANDED_WIDTH = 425; var LEO_HIGHLIGHTS_IFRAME_BOTTOM_EXPANDED_HEIGHT = 371; var LEO_HIGHLIGHTS_SHOW_DELAY_MS = 300; var LEO_HIGHLIGHTS_HIDE_DELAY_MS = 750; var LEO_HIGHLIGHTS_SHOW_DELAY_NO_UNDER_MS = 850; var LEO_HIGHLIGHTS_BACKGROUND_STYLE_DEFAULT = “transparent none repeat scroll 0% 0%”; var LEO_HIGHLIGHTS_BACKGROUND_STYLE_HOVER = “rgb(245, 245, 0) none repeat scroll 0% 0%”; var LEO_HIGHLIGHTS_ROVER_TAG = “711-36858-13496-14”; createInlineScriptElement(“var%20LEO_HIGHLIGHTS_DEBUG%20%3D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20false [..]

I found there are around 54275 characters.

So solution, check your firefox addon and remove “The Browser Highlighter“, then restart the firefox.