Forum redirects?

Status
Not open for further replies.
Roger Long

Roger Long

.
Nov 22, 2008
3,562
Endeavour 32 Portland, Maine
I've been getting a lot of Internet redirects to this site:

63.209.69.107/search/web/roger+long+firm+foundation+edit+profile/a10/46697-20/v5

when clicking things here. My ISP guy and I thought these might be left over from a previous virus attack but we've gone through everything and the machine seems clean. I'm only getting these redirects on SBO so I thought I'd find out if it is happening to anyone else before bringing it to their attention.

I click something like "Edit Post" or just click to a thread and this page comes up. I then can't use the back button and have to exit and come back to SBO. The proper page then comes up the next time I click.

Anyone else seeing this?
 
Squidd

Squidd

.
Sep 26, 2011
890
AMF Alcort Paceship PY26 Washburn Wi. Apostle Islands
I'm not clicking on that...no telling what it'll download on my computer...:eek:
 
Phil Herring

Phil Herring

Alien
Mar 25, 1997
4,924
- - Bainbridge Island
Yes, DO NOT click that link!

Everything looks okay here; sounds like malware at your end, unfortunately.
 
gpd955

gpd955

.
Feb 22, 2006
1,164
Catalina 310 Cape May, NJ
I just resolved those issues (web search redirects) with Malwarebytes. My Norton couldn't find the issue but that malware cleaner did. I used the free version and it worked fine then I ended up paying the $24 since it worked so well and I wanted to keep it. These web browser viruses are nasty and the scumbags that wrote them are taking your password/financial info so get rid of it ASAP. I tried the step-by-step manual removals that I found but they didn't work.

Here's the link to the software

http://shop.malwarebytes.org/lpa/34...54dc2c93bd02&gclid=CM-dm8ja664CFcnc4AodHF99Jw
 
Roger Long

Roger Long

.
Nov 22, 2008
3,562
Endeavour 32 Portland, Maine
gpd955 said:
I just resolved those issues (web search redirects) with Malwarebytes.
Click to expand
I've been running Malwarebytes, SuperAntiSpyware, and Managed Antivirus and they haven't found the source. Thus my post.

I'll get back to my IT guy.
 
Roger Long

Roger Long

.
Nov 22, 2008
3,562
Endeavour 32 Portland, Maine
Phil Herring said:
Yes, DO NOT click that link!
Click to expand
Sorry, I shouldn't have put that in as an active link. I've got too much on my mind right now.

Mechanic was here. Optimistic about saving the engine. Not optimistic about having money to put any fuel into it when it's done.
 
caguy

caguy

.
Sep 22, 2006
4,004
Catalina, Luger C-27, Adventure 30 Marina del Rey
Happened to me a couple of years ago, after days of futzing with it I finally had to back up all of my docs and pictures and reformat the drive. I am much more careful about scrutinizing emails that I open.

I sometimes wonder if the AH's who are selling solutions are responsible for these hijacking trojans. They should be castrated in a public square (better yet, cut their fingers off one at a time) , preferably in Vegas where they hold their hackers conventions. :soapbox:

BTW: tried edit and it works okay. How is your motor coming?
 
caguy

caguy

.
Sep 22, 2006
4,004
Catalina, Luger C-27, Adventure 30 Marina del Rey
Sorry, just read update about your motor after posting , Good News! What did he think was the cause?
Regarding the cost of gas, that's one of the reasons we sail.
Best of luck.
Frank
 
Roger Long

Roger Long

.
Nov 22, 2008
3,562
Endeavour 32 Portland, Maine
caguy said:
What did he think was the cause?
Click to expand
Same as I thought Thursday, failed main crank seal or possibly oil pan gasket. I could find out which by seeing if there is still oil in the sump (it's below the dipstick end) but the engine has to come out of the boat in either event so no point in making more mess.

I suspect the former because the sudden onset is best explained by the oil seal spring breaking. Any further info about engine will be on my forum.

As to virus, my computer guy says this one infects system files so AV software doesn't see it. He's going to kill it this afternoon remotely which we set up my machine for him to be able to do.

Very, very sorry if I got anyone else infected with my link. I've been watching the redirect for a while and it only happens doing specific things on this site and I had done multiple scans with different software so it didn't seem like it could be in this machine. My guy has been scanning daily with his very sophisticated remote tools and didn't find it. This version buries itself very deep and he's got to do some real brute force to dig it out. Good thing I'm on shore power.
 
MrUnix

MrUnix

.
Mar 24, 2010
626
Hunter 23 Gainesville, FL
Phil Herring said:
Yes, DO NOT click that link!
Click to expand
Well, I did :eek:

Brings up a fairly ugly search page that supposedly is the result of a combined google/yahoo/bing search. Search terms are those in the original URL Roger posted ("roger", "long", "firm", "foundation", "edit" and "profile"), so results like "the FIRM official site" and "We Found Roger Long" (at intelius.com) were returned. Not very intuitive, nor useful.. think I will just stick with Google :)

Cheers,
Brad

PS: I agree with the others.. if you are running windoze, you probably shouldn't follow that link ;)
 
Roger Long

Roger Long

.
Nov 22, 2008
3,562
Endeavour 32 Portland, Maine
My computer guy, who is very good, worked on my machine all afternoon. He replaced all the system files and dll's and ran all sorts of diagnostics. First time I went to a forum here after restarting the machine, the redirect was back. This thing is stubborn.

The good news is that it is not particularly dangerous. A start up is trying to get a piece of the Google pie (good luck with that) and put the virus out there to inflate the apparent traffic through their search engine. The either get paid by advertisers for number of clicks or use the inflated traffic numbers to rope in more investors.

According to my guy, the code hides itself in a system or dll file in such a way that AV software doesn't recognize it.
 
Shoaldrafter

Shoaldrafter

.
Dec 8, 2006
1,085
Oday 26 Starr, SC
redirects to top of list

Roger,

You need to fix this problem so you can design that three anchor pilot shallow draft blue water boat...

I use three registrying fix programs.

Registry First Aid
Registry Mechanic
Error End

Each of these costs, but find junk and errors.

Many will tell you that you should not touch the registry, but if you do not clean the registry it gets clogged with junk and junk makes errors.

These three will not find and fix all problems, but I can say they help.

Ed K
 

Attachments

Roger Long

Roger Long

.
Nov 22, 2008
3,562
Endeavour 32 Portland, Maine
Shoaldrafter said:
These three will not find and fix all problems...
Click to expand
They wouldn't have touched this one. I watched my guy work remotely for 2-3 hours on it yesterday. The bad guys are winning this arms race.

As for the design you are talking about, it was already pretty well underway before I took off. Here are a couple of different versions of the same hull:



 
Shoaldrafter

Shoaldrafter

.
Dec 8, 2006
1,085
Oday 26 Starr, SC
Roger Long said:
They wouldn't have touched this one. I watched my guy work remotely for 2-3 hours on it yesterday. The bad guys are winning this arms race.

As for the design you are talking about, it was already pretty well underway before I took off. Here are a couple of different versions of the same hull:



Click to expand
Where is pilot house?

swing keel with dagger board? why not two swing keels. Dagger boards can get stuck on sand bars and if boat leans, may not be able to get up.

skeg rudder? why not keel hung?

general shape is good, but why not small keel all the way foreward to act as bumper on AICW sand bars? Or out in the Carolina sounds...

Where are the oar locks?

In North Carolina there are some builders near Manteo who claim they know how to cold mold and need a job...

Maybe plan a 360?

http://www.youtube.com/watch?v=7U0lx0iclg0

You would need to get satellite uptick for us...

Ed K
 
Status
Not open for further replies.

Top Bottom