Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Ad-Blocker

CRITICAL RISKRemoved from Chrome Web Store

Ad-Blocker

ID: kacljcbejojnapnmiifgckbafkojcncf

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

1.5

Size

0.57 MB

Rating

4.2/5

Reviews

339

Users

762,868

Type

Extension

Updated

Nov 11, 2018

Publisher Contextual Analysis

Author: http://www.ad-blocker.orgView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

762,868

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Ad-Blocker is the best ad blocker for your web browser. It can block tracking scripts, banners, annoying pop-up ads and much more.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

-9.04%(-75,822 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 338 ratings+1 (0%)

Average Rating

Current: 4.22 / 5.0-0.01

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical4

High4

Medium1

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.5 Code review	9

Extension Version	Code Review Findings
1.5	9

Files with findings

7 distinct paths — top paths by unique finding count:

ext/showNeg.js3
background.js1
ext/exclusionlist.js1
ext/exclusionlistHelper.js1
GlobalInjectJS.js1
GlobalNotifierStats.js1
OneSignal.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Phishing	critical	ext/showNeg.js (line 218)	The extension listens to all `window.postMessage` events on every page and, when receiving an action of 'DOWNLOADCLIENTSIDE_C', unconditionally redirects the current tab to a URL controlled by the message sender (`eve…	1.5
2	Remote Code Loading	critical	GlobalNotifierStats.js (line 2)	This content script dynamically creates a <script> element pointing to a remote URL (negbar.ad-blocker.org) and appends it to the <head> of every page the user visits. The loaded script executes with full content-scri…	1.5
3	Remote Code Loading	critical	GlobalInjectJS.js (line 2)	A second content-script runs on every http/https page and dynamically injects a remote JavaScript file (adblocker-chromeglobalinjectjs.js) from negbar.ad-blocker.org into the page's DOM. Like GlobalNotifierStats.js th…	1.5
4	Remote Code Loading	critical	ext/showNeg.js (line 235)	On every page load the extension fetches a JSON control file from negbar.ad-blocker.org/chrome/adblocker-chrome-shownegJson.txt. The `ifrmsrc` and `ifrmcssText` fields from that remote JSON are used verbatim as the `s…	1.5
5	Code Injection	high	ext/showNeg.js (line 289)	A hardcoded fallback injects an iframe from adblocker.pcvark.com (the publisher's own domain) as a full-width fixed-position banner at z-index 2147483647 on top of every web page the user visits. This is a nagware/adw…	1.5
6	Other	high	ext/exclusionlistHelper.js (line 7)	The extension periodically fetches a remotely-controlled exclusion list over plain HTTP (no TLS, no integrity check) from pro.ad-blocker.org and uses it to suppress ad-blocking on those domains. The shipped list in ex…	1.5
7	Tracking	high	background.js (line 94)	The background page silently initialises OneSignal with the publisher's hardcoded app ID and GCM project number and immediately tags every user as 'ad-blocker / ad-blocker-Chrome'. Combined with the Google identity ex…	1.5
8	Unauthorized Data Collection	high	OneSignal.js (line 69)	The extension uses the `chrome.identity` permission to call `getProfileUserInfo()` and silently exfiltrates the user's Google account ID (sent as `ad_id`) along with their language, timezone, platform, and Chrome vers…	1.5
9	Other	medium	ext/exclusionlist.js (line 1)	The hardcoded exclusion list shipped with the extension contains the publisher's own domains (pcvark.com, ad-blocker.org, adblocker.pcvark.com) as well as hundreds of PUP/scareware download and affiliate marketing dom…	1.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

118

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.ad-blocker.org	/,	http://www.ad-blocker.org/,
www.gnu.org	/licenses/	http://www.gnu.org/licenses/
adblockplus.org	-	https://adblockplus.org/
hg.adblockplus.org	/jshydra/	https://hg.adblockplus.org/jshydra/
*	/*	http:///
*	/*	https:///
pro.ad-blocker.org	/Json/ExclusionList.txt	http://pro.ad-blocker.org/Json/ExclusionList.txt
negbar.ad-blocker.org	/chrome/adblocker-chrome-shownegJson.txt	https://negbar.ad-blocker.org/chrome/adblocker-chrome-shownegJson.txt
adblocker.pcvark.com	/downloadProduct.html	https://adblocker.pcvark.com/downloadProduct.html
apmserv.pcvark.com	/apm_html/v1_1/detectuserapm.html	https://apmserv.pcvark.com/apm_html/v1_1/detectuserapm.html

Showing 1 to 10 of 120 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.3.14.3	IPv4	-
1.2.3.4	IPv4	-
1.1.1.1	IPv4	-
2.1.1.1	IPv4	-
192.0.2.128	IPv4	-
192.1.2.128	IPv4	-
1.0.0.0	IPv4	-
192.168.1.33	IPv4	-

3.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

this extension is not able to block adds in YouTube

Sahil patel·6 Jun 2023

no me funciona

Rosmery Leal Alonso·27 Dec 2022

excelente!

Inácio Nascimento (kornpb)·4 Dec 2022

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Ad-Blocker

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating