InformAction Forums

hi,

on some web pages related to webmail login or CB payment NoScript reveals a page full of url. Each line starts with the the website data (ssl0.ovh.net/roundcube) then the ending refers to the same business (quikorder.pizzahut.com) or stuff like div.button_div%5Bonclick*=

The Internet provider says my computer (imac OSX 10.9.1) is probably infested with malware. What to do?

Thanks

Olivier


http://127.0.0.1/
https://ssl0.ovh.net/images
https://ssl0.ovh.net/roundcube/0.5
https://ssl0.ovh.net/roundcube/?e.replace(/&/g,
https://ssl0.ovh.net/roundcube/www.digitick.com
https://ssl0.ovh.net/roundcube/app.asana.com
https://ssl0.ovh.net/roundcube/www.hautelook.com
https://ssl0.ovh.net/roundcube/div.cart ... eckout_btn
https://ssl0.ovh.net/roundcube/billetavion.opodo.fr
https://ssl0.ovh.net/roundcube/div.butt ... Bonclick*=
https://ssl0.ovh.net/roundcube/moUserLoginForm.submit
https://ssl0.ovh.net/roundcube/moCustom ... orm.submit
https://ssl0.ovh.net/roundcube/secure.darty.com
https://ssl0.ovh.net/roundcube/www.ovh.com
https://ssl0.ovh.net/roundcube/www.icloud.com
https://ssl0.ovh.net/roundcube/div.auth-submit%5Brole=
https://ssl0.ovh.net/roundcube/www.seamless.com
https://ssl0.ovh.net/roundcube/member.aetna.com
https://ssl0.ovh.net/roundcube/www.quirky.com
https://ssl0.ovh.net/roundcube/div.tiny ... ton.submit
https://ssl0.ovh.net/roundcube/www.ea.com
https://ssl0.ovh.net/roundcube/div.imag ... loat-right
https://ssl0.ovh.net/roundcube/www.elance.com
https://ssl0.ovh.net/roundcube/secure.ibis.com
https://ssl0.ovh.net/roundcube/www.sixt.fr
https://ssl0.ovh.net/roundcube/shoptoearn.hhonors.com
https://ssl0.ovh.net/roundcube/div.btn-center
https://ssl0.ovh.net/roundcube/quikorder.pizzahut.com
https://ssl0.ovh.net/roundcube/www.virtualregatta.com
https://ssl0.ovh.net/roundcube/secure.accorhotels.com


http://127.0.0.1/
https://paiement.webaffaires.org/images
https://paiement.webaffaires.org/images ... vhsarl/0.5
https://paiement.webaffaires.org/images ... place(/&/g,
https://paiement.webaffaires.org/images ... gitick.com
https://paiement.webaffaires.org/images ... .asana.com
https://paiement.webaffaires.org/images ... telook.com
https://paiement.webaffaires.org/images ... eckout_btn
https://paiement.webaffaires.org/images ... n.opodo.fr
https://paiement.webaffaires.org/images ... Bonclick*=
https://paiement.webaffaires.org/images ... orm.submit
https://paiement.webaffaires.org/images ... orm.submit
https://paiement.webaffaires.org/images ... .darty.com
https://paiement.webaffaires.org/images ... ww.ovh.com
https://paiement.webaffaires.org/images ... icloud.com
https://paiement.webaffaires.org/images ... it%5Brole=
https://paiement.webaffaires.org/images ... amless.com
https://paiement.webaffaires.org/images ... .aetna.com
https://paiement.webaffaires.org/images ... quirky.com
https://paiement.webaffaires.org/images ... ton.submit
https://paiement.webaffaires.org/images ... www.ea.com
https://paiement.webaffaires.org/images ... loat-right
https://paiement.webaffaires.org/images ... elance.com
https://paiement.webaffaires.org/images ... e.ibis.com
https://paiement.webaffaires.org/images ... ww.sixt.fr
https://paiement.webaffaires.org/images ... honors.com
https://paiement.webaffaires.org/images ... btn-center
https://paiement.webaffaires.org/images ... zzahut.com
https://paiement.webaffaires.org/images ... egatta.com
https://paiement.webaffaires.org/images ... hotels.com