Site Virus/Spam?

ChrisSlicks · 07-19-2012, 01:37 PM

I've looked into this, and the most likely culprit is an old buggy version of vBSEO, which is an analytics plug-in for vBulletin which this site runs on.

AK needs to update vBSEO to the latest version (and possibly the entire vBulletin install) in order to correct this.

The problem is only on clicking links from google searches that I'm aware of since they use a linkback URL syntax. It will happen once or twice or a few times in a row and then it will eventually cure itself.

chops · 07-20-2012, 04:27 PM

yea this is some sort of malware. someone needs to run some virus scan's and update the server quick!

Huck · 07-21-2012, 03:16 PM

Quote:

Originally Posted by ChrisSlicks

I've looked into this, and the most likely culprit is an old buggy version of vBSEO, which is an analytics plug-in for vBulletin which this site runs on.

AK needs to update vBSEO to the latest version (and possibly the entire vBulletin install) in order to correct this.

The problem is only on clicking links from google searches that I'm aware of since they use a linkback URL syntax. It will happen once or twice or a few times in a row and then it will eventually cure itself.

I agree with you completely except for the last part, from my research it sounds like the redirect code is designed to only happen so often i.e. not every time you go to the site. I believe AK needs to remove the line of code and then update, but I could be wrong on that. The links I provided earlier explain everything better than I could.

Sent from my iPizzle using magic and new-fangled science stuff

ChrisSlicks · 07-21-2012, 05:52 PM

Quote:

Originally Posted by Huck

I agree with you completely except for the last part, from my research it sounds like the redirect code is designed to only happen so often i.e. not every time you go to the site. I believe AK needs to remove the line of code and then update, but I could be wrong on that. The links I provided earlier explain everything better than I could.

I believe it has something to do with caching. Once correctly resolved I never see it again for the rest of the browsing session. You never get it visiting the site directly, only on a google search.

Huck · 07-21-2012, 06:19 PM

Agreed. I'm not an expert in this so I'll defer to you in this

Sent from my iPizzle using magic and new-fangled science stuff

Trips · 07-21-2012, 06:23 PM

I got a reply from AK and he will be looking into it.

Huck · 07-21-2012, 06:29 PM

Sounds good, thanks man!

Sent from my iPizzle using magic and new-fangled science stuff

Coon-azz · 07-21-2012, 08:58 PM

Quote:

Originally Posted by 370Z Purist

It's a common google redirect. Does occur occasionally with forum links. The most accurate conjecture is that it's malware which hasn't really been recognized by your antivirus yet. I have a laptop given to me by the university, which has a very poor antivirus system intended to protect the network before the computer. Installed ESET and force removed the antivirus system, and now, it never happens anymore.

Still going on. I don't want to catch something from going to this forum. I would hope to see the redirect removed...

ChrisSlicks · 07-21-2012, 09:13 PM

Quote:

Originally Posted by Coon-azz

Still going on. I don't want to catch something from going to this forum. I would hope to see the redirect removed...

You've had worse, nothing a little penicillan can't fix

Huck · 07-22-2012, 07:25 AM

Once you've had the Shado 'erps, you won't even care about a computer virus.

But just to make this clear, it doesn't seem like a virus that infects your computer. It's solely on the forum and won't do any damage to your computer. You're safe. It's just annoying.

Sent from my iPizzle using magic and new-fangled science stuff

DarkJak · 07-22-2012, 10:29 AM

Glad this is getting looked into. It doesn't happen to me much, maybe just 1/5 of the time, but it's still annoying.

DIGItonium · 07-26-2012, 02:31 PM

No wonder... I saw the exact same thing early this week. I was searching for the AAM oil cooler and clicked on this forum post from Google. I barely got to this site when it got redirected to some other site. A pop up dialog asks me to visit their sponsors or whatever when leaving the site. I had to manually kill the browser to get out of the mess.

DIGItonium · 07-26-2012, 02:35 PM

Ah this is the bug... clicking back doesn't help. It pops up a messagebox asking the user to visit the site's sponsors, and it prevents the user from getting focus on the browser. I ended up killing the browser from the task manager.

BTW, at work... the firewall blocks the URL site and categorizing it as "scam, spam, illegal, etc."

1st · 07-26-2012, 02:44 PM

I can't even go on this site from my home computer do to all these prompts that indicate it’s a threat for viruses. It allows me to visit here and there on my work computer without redirecting me to a different URL. I think it has to do with there is no security. Anybody that isn’t a member can browse. All other car sites that I have been on require membership to browse.

1st · 07-26-2012, 02:48 PM

I can't even go on this site from my home computer do to all these prompts that indicate it’s a threat for viruses. It allows me to visit here and there on my work computer without redirecting me to a different URL. I think it has to do with there is no security. Anybody that isn’t a member can browse. All other car sites that I have been on require membership to browse.

07-19-2012, 01:37 PM	#61 (permalink)
ChrisSlicks A True Z Fanatic Join Date: Mar 2009 Location: North East Posts: 6,203 Drives: 09 370Z Sport M6 Rep Power: 653	I've looked into this, and the most likely culprit is an old buggy version of vBSEO, which is an analytics plug-in for vBulletin which this site runs on. AK needs to update vBSEO to the latest version (and possibly the entire vBulletin install) in order to correct this. The problem is only on clicking links from google searches that I'm aware of since they use a linkback URL syntax. It will happen once or twice or a few times in a row and then it will eventually cure itself. __________________ Hotchkis ARB \| Stillen CAI \| Art Pipes \| Berk CBE \| Stillen AP Racing Brakes \| AE Performance Oil Cooler \| BC Racing ER Coilovers \| Doran Control Arms

07-21-2012, 06:19 PM	#65 (permalink)
Huck A True Z Fanatic Join Date: Jan 2012 Location: Cocoa, Florida Age: 41 Posts: 5,075 Drives: Pantydropper machine Rep Power: 33	Agreed. I'm not an expert in this so I'll defer to you in this Sent from my iPizzle using magic and new-fangled science stuff __________________ VLEDS \| Evo-R \| Moddiction \| CF Hood Struts \| F.I. CF CBE & LTH \| Stillen CAI \| NST Pulleys \| UpRev \| Z1 \| M7 \| Status \| Forgestar \| PSS \| Whiteline \| SPL \| SPC \| Kenwood \| Zenclosure \| Kicker \| Alpine Type R

07-21-2012, 06:23 PM	#66 (permalink)
Trips Administrator Join Date: May 2009 Location: Disneyland, Ca Posts: 8,728 Drives: 🔰 Rep Power: 10	I got a reply from AK and he will be looking into it. __________________

07-21-2012, 06:29 PM	#67 (permalink)
Huck A True Z Fanatic Join Date: Jan 2012 Location: Cocoa, Florida Age: 41 Posts: 5,075 Drives: Pantydropper machine Rep Power: 33	Sounds good, thanks man! Sent from my iPizzle using magic and new-fangled science stuff __________________ VLEDS \| Evo-R \| Moddiction \| CF Hood Struts \| F.I. CF CBE & LTH \| Stillen CAI \| NST Pulleys \| UpRev \| Z1 \| M7 \| Status \| Forgestar \| PSS \| Whiteline \| SPL \| SPC \| Kenwood \| Zenclosure \| Kicker \| Alpine Type R

07-22-2012, 07:25 AM	#70 (permalink)
Huck A True Z Fanatic Join Date: Jan 2012 Location: Cocoa, Florida Age: 41 Posts: 5,075 Drives: Pantydropper machine Rep Power: 33	Once you've had the Shado 'erps, you won't even care about a computer virus. But just to make this clear, it doesn't seem like a virus that infects your computer. It's solely on the forum and won't do any damage to your computer. You're safe. It's just annoying. Sent from my iPizzle using magic and new-fangled science stuff __________________ VLEDS \| Evo-R \| Moddiction \| CF Hood Struts \| F.I. CF CBE & LTH \| Stillen CAI \| NST Pulleys \| UpRev \| Z1 \| M7 \| Status \| Forgestar \| PSS \| Whiteline \| SPL \| SPC \| Kenwood \| Zenclosure \| Kicker \| Alpine Type R

07-20-2012, 04:27 PM	#62 (permalink)
chops A True Z Fanatic Join Date: Oct 2010 Location: NA Posts: 1,732 Drives: NA Rep Power: 21	yea this is some sort of malware. someone needs to run some virus scan's and update the server quick!

07-22-2012, 10:29 AM	#71 (permalink)
DarkJak A True Z Fanatic Join Date: Jun 2011 Location: Madison, WI Posts: 1,390 Drives: 2009 370Z Rep Power: 13448	Glad this is getting looked into. It doesn't happen to me much, maybe just 1/5 of the time, but it's still annoying.

07-26-2012, 02:31 PM	#72 (permalink)
DIGItonium A True Z Fanatic Join Date: Jan 2009 Location: Kansas Posts: 3,800 Drives: 09 Z34-TT 6MT Rep Power: 42	No wonder... I saw the exact same thing early this week. I was searching for the AAM oil cooler and clicked on this forum post from Google. I barely got to this site when it got redirected to some other site. A pop up dialog asks me to visit their sponsors or whatever when leaving the site. I had to manually kill the browser to get out of the mess. __________________

07-26-2012, 02:35 PM	#73 (permalink)
DIGItonium A True Z Fanatic Join Date: Jan 2009 Location: Kansas Posts: 3,800 Drives: 09 Z34-TT 6MT Rep Power: 42	Ah this is the bug... clicking back doesn't help. It pops up a messagebox asking the user to visit the site's sponsors, and it prevents the user from getting focus on the browser. I ended up killing the browser from the task manager. BTW, at work... the firewall blocks the URL site and categorizing it as "scam, spam, illegal, etc." __________________

07-26-2012, 02:44 PM	#74 (permalink)
1st A True Z Fanatic Join Date: Jul 2012 Location: I 80 Biz U.S. 50 Posts: 1,708 Drives: Platinum Z Rep Power: 1615	I can't even go on this site from my home computer do to all these prompts that indicate it’s a threat for viruses. It allows me to visit here and there on my work computer without redirecting me to a different URL. I think it has to do with there is no security. Anybody that isn’t a member can browse. All other car sites that I have been on require membership to browse.

07-26-2012, 02:48 PM	#75 (permalink)
1st A True Z Fanatic Join Date: Jul 2012 Location: I 80 Biz U.S. 50 Posts: 1,708 Drives: Platinum Z Rep Power: 1615	I can't even go on this site from my home computer do to all these prompts that indicate it’s a threat for viruses. It allows me to visit here and there on my work computer without redirecting me to a different URL. I think it has to do with there is no security. Anybody that isn’t a member can browse. All other car sites that I have been on require membership to browse.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
FS: Yamaha XS8 and Access Virus TI	DIGItonium	Misc Items for sale (No Z stuff)	7	12-06-2013 07:10 AM
dealing with spam	shadoquad	The370Z.com Feedback, Suggestions & Questions	18	01-21-2011 07:27 AM
Spam?????	SigPapa226	The370Z.com Feedback, Suggestions & Questions	15	02-27-2010 08:49 AM