FunWebProducts, is it more than just a browser add-on?

[JS_Harris]

My server logs for the past 3 days shows a jump from roughly 3% to 6%-7% activity for FunWebProducts. I've read other threads here in the past (http://www.webmasterworld.com/forum21/7187.htm) and have not taken action against it because it's basically a potential problem on visitors computers.

Over the past 3 days however FunWebProducts has repeatedly hit the login page of my forum with bot-like behavior. Every 2 seconds for 3 minutes or so then returning a little while later on a new IP and doing the same thing again and again. Each attempt has a lot of gibberish attached to the page parameters, it's seemingly trying to log in.

I'm concerned, but what could I do if anything since it's also on a lot of visitors computers?

[Marcia]

It's supposed to be a parasite (spyware) with intrusive add-on bundling. There are sites out there with instructions on how to remove the thing.

[jdMorgan]

Dig a little deeper into those requests, and you'll likely find that it's a browser spoofer.

Also try a reverse-DNS lookup of the IP address (or range of addresses) where those requests originate. If the addresses resolve to a hosting or colocation company, you can likely block them without impacting legitimate traffic.

Jim

[JS_Harris]

Thanks Marcia, Jim.

I typed 'javascript:alert(navigator.userAgent)' into my firefox navigation toolbar and my computer isn't infected, it would have returned with FunWebProducts in the message if it was.

I sent an email off to my host about it and will post back what they say before I start blocking IP's. Tick, tock.