Take the 2-minute tour ×

I found some code injected somehow on my site. It links to

<script src="http://p.chango.com/static/c.js. 
  1. How can I get rid of it?
  2. Is this coming from my browser? Mind you, I see it in different browsers and PCS.
  3. is my share hosting provider infected?
share|improve this question
add comment

4 Answers

This may be injected by your shared hosting provider itself. If you're seeing it on multiple computers and browsers, the likelihood of it being malware is slim. Some shared hosts have things like this, especially if it is a free host. I'm not a Javascript expert, but it looks like this code is adding a further JS file to your header, probably not a real JS file but more of a "pixel" such as is used in internet traffic tracking.

share|improve this answer
add comment

That script from chango.com doesn't seem to be malware, but is a tracker. Since it is a tracker, it is possible that your hosting provider injected it on purpose.

Installing Ghostery or another anti-tracker browser extension on your browser will disable it from being executed by your browser.

share|improve this answer
add comment

I have same problem but I solved it from this Randy's answer.

got rid of the p.chango.com script by going to their website and clicking "opt out." It does not appear to be a very dangerous script but does track your searching and browsing for "target marketing purposes."

I removed an unknown extension "SelectionLinks 1.5" and that got rid of netloader.cc. It appears to be attached to a number of extensions so just look for the ones you don't know what they do. Personally I am blocking all content from their host server at If you do the same tell the parent company at www.cachefly.com.

The trustworthy extension "noscript" is very good at blocking these scripts as well as letting you know the sneaky buggers are there in the first place.

share|improve this answer
add comment

Hey man this is just a company that they sell advertisements go in to their website and press opt out at the bottom of the page ! then you are good to go

share|improve this answer
add comment

Your Answer


