PDA

View Full Version : To Site Admin: KT might have a virus



jimsea
04-05-2013, 04:39 PM
FWIW I get multiple redirects when I try to logon to Kahr Talk.

jocko
04-05-2013, 04:46 PM
so far I have seen none of that on my end. might be in ur system, as I haven't heard this from other members--yet.. Just sayin

deadeye
04-05-2013, 04:58 PM
No problem here.

bob98366
04-05-2013, 05:10 PM
Logged on this afternoon with no issues.

JFootin
04-05-2013, 05:53 PM
Since April 1, I have been seeing smilies in strange places. I had seen this once before several months ago. Look at these screen prints.

On every post, the Multi-Quote is replaced with Hat Tipper and the button to the right is replaced with Busy.
http://i1230.photobucket.com/albums/ee486/John_England/Misc/Bug1_zps8d721089.png

On the post edit window, the Hyperlink button is replaced with A/A and the list expand buttons are replaced with slider looking things.
http://i1230.photobucket.com/albums/ee486/John_England/Misc/Bug2_zps8a0b1228.jpg

All of these items perform correctly, even though they don't look right.

jocko
04-05-2013, 06:02 PM
Heh JFootin, when u see these strange smilies is this before or after u finish the bottle of Jim Beam:? Jusst asking.

muggsy
04-05-2013, 07:59 PM
I've gotten one redirect each time that I tried to logged on today. On the second attempt I've always gotten through.

jimsea
04-05-2013, 10:10 PM
I've gotten one redirect each time that I tried to logged on today. On the second attempt I've always gotten through.

Exact same thing here. Just started a few days ago.




















.............which porn sites are you visiting, we might be able to narrow this thing down to a particular site. (joke) :D

O'Dell
04-06-2013, 12:00 AM
I log on two or three times a day and have never had a problem.

RRP
04-06-2013, 02:20 AM
I've gotten one redirect each time that I tried to logged on today. On the second attempt I've always gotten through.


Exact same thing here. Just started a few days ago.


Exact same thing here, too. It never happened before this week. I suspected it was caused by a link I accessed from this site, but I didn't know that for certain. Given that others have had the same problem, I'm quite confident that's how I got infected.

Anyway, there's an easy fix. I cleared cookies and the redirects stopped immediately.

I have always configured my browser (Firefox) to automatically clear cookies whenever I close the browser. But the offending site changed the configuration. Restoring my privacy settings resolved the problem.

I have since installed, updated, and run Malwarebytes. Full system scans are coming up clean. I also ran a scan in Safe Mode to be sure. I think I'm good to go.

MW surveyor
04-06-2013, 05:26 AM
No problems for me................................................ ............I don't open blind links :)

jimsea
04-06-2013, 08:19 AM
Got rid of the cookies.......no more redirects.

Thanks.

ESAFO
04-08-2013, 05:47 PM
everytime i click a link to review threads i get this, it only happens the 1rst time i click the link.
when i go to click the link again it goes directly to the thread i'm wanting to view.
it started last week & i thought nothing about it, but it's still doing it.. :32:




MyFilestore.com - Your Free File Hosting





Home

Contact Us

Proceed next

Privacy

Rules





Resource is missing
File with specified ID not found. It may have been removed for breaking the rules.


Online Backup Solutions

What if a fire, flood, theft or any other disaster would destroy your lifetime work, your very important data base, all of your information? You must have some onsite backup solution, but what you really need is an online backup service that will help insure that the critical information is always available and secure.



We are living in times where data of any kind are at stake. Internet trespassing and theft has become an issue that endangers every site, with no importance to what it may contain. Although it may seem as having no importance it has been demonstrated that the so called hackers have made terrible disasters, to many business industries by braking into the most guarded data bases.
New recovery software has been developed, producing remarkable changes in the way business work. One of these would be Online Server Backup, which eliminates typical backup headaches. The ability to automate your backup and remove the data off-site to a secure backup with a click mouse button is now a reality. Initially it may seem expensive, but at a closer look, it is understandable since online backup technology utilizes a company's existing telecom lines Online backup server eliminates all these traditional cost factors.
Nowadays everything goes around the clock. Technology at a maximum speed evolution offers the solution for a maximum speed efficiency of work. Nothing can be done without having a computer and most of all without having constantly connection and access to internet provider. The latter offers a great deal of information and online programs which help you to be constantly on track with your work, in the event of problems or if you simply desire improvement. One of these online services, that provide you assistance and help, is the Online Backup Services.
Online Server Backup is using software that automates the uploading of selected files to a remote computer and it has the ability to restore files, using internet. Many providers offer a free trial period so that you can determine whether you buy it or not. The online service provider supplies you with software that has to be installed on the Pc or server you wish to backup.
The software allows you to select the files to backup and set up a backup schedule. Afterwards, your data will be normally encrypted to secure it from eventual trespassers, compressed to speed up transfer and reduce the amount of storage space required, and uploaded to the server at the service provider's data center.
In case you wish to use online backup service, you have to know that the first time you will use online backup, it will take a long time. Of course, there is no exact time, because this depends on the amount of data you want to backup. Generally it is a matter of several hours, but it may also be a matter of days, before the software finishes backing up your selected data, because it has to not only storage your data, but also encrypt, compress and copy it onto the remote server.
Data problem has become a critical component in an organization's disaster recovery and business continuity plans. Data is not only the foundation of business but remains a vital irreplaceable strategic asset. Faced with increasingly failed strategies of recovering lost data, disaster planning professional have no other alternative but look for new recovery solutions.

About the Author

Could you recreate the emails, documents and photos on your home computer in the event of a virus or hard drive failure? If your computer was stolen would you be able to recreate or restore all the memories taken? With Empyreal Systems Online Backup you could rest easy that no matter what your data is safe and accessible only by you 24x7x365Online Backup by Empyreal Systems http://empyrealsystems.com/

Armybrat
04-08-2013, 06:16 PM
Which porn sites you guys been surfin'?

ESAFO
04-08-2013, 06:24 PM
Which porn sites you guys been surfin'?

i can't give up all my info.. :D
seriously though this is the only site it happens on. :confused:

JFootin
04-08-2013, 07:18 PM
Got rid of the cookies.......no more redirects.

Thanks.

Got rid of the cookies and no more smilies in strange places.

ESAFO
04-09-2013, 01:33 PM
Got rid of the cookies and no more smilies in strange places.

i've done that twice with my laptop since this started happening & i still get the same thing everytime i try to get on.
like i said before it's only happening on this forum.

mr surveyor
04-09-2013, 05:02 PM
ESAFO

I know the feeling, but in my case it was a disaster event. I don't think you are in meltdown stage if this is the only site you have a problem with. Recently I ran the Windoze update, then started having problems on the Marlin forum. I checked their computer/tech issues sub-forum and found that others were experiencing problems too. The cure was to go to your "Tools" drop down menu and click the "compatibility view" button. After you do that, you will have to log on again with your user name and password, but it's worth a try.

surv

ESAFO
04-09-2013, 07:07 PM
ESAFO

I know the feeling, but in my case it was a disaster event. I don't think you are in meltdown stage if this is the only site you have a problem with. Recently I ran the Windoze update, then started having problems on the Marlin forum. I checked their computer/tech issues sub-forum and found that others were experiencing problems too. The cure was to go to your "Tools" drop down menu and click the "compatibility view" button. After you do that, you will have to log on again with your user name and password, but it's worth a try.

surv

k i'll try that thanks.
the odd thing is when i clicked the link in my e-mail to go to this thread, it did'nt show this time so i'll give it a whirl & see what happens.

CJB
04-09-2013, 08:12 PM
I used to get a lot of redirects - its not a virus on the site. It has to do with google, and the way they are running things. If you click the google link... sometimes it redirects. Its total BS, but if you get to the site directly... it works like a champ, every time.

Tinman507
04-10-2013, 03:27 AM
It is most definitely not a Google problem. It IS a redirect script that's been stuffed into one of the numerous config or php files of Kahrtalk.

I have had this issue several times on a couple of the websites I do and it only happens when going to the site through a google search.

A hacker has gotten access to some of the files and planted malicious code into one or (likely) many more files.

A short Google search of this issue reveals a possible solution at the Vbulletin SEO forum http://www.vbseo.com/f3/security-issue-41463/

MW surveyor
04-10-2013, 08:37 AM
Why is this still in RKBA!

johnh
04-10-2013, 09:47 AM
Wish this was in tech support as I would have seen it sooner. I will get on it. I am not seeing it myself, and was not able to replicate, but you never know.

Tinman507
04-10-2013, 10:43 AM
John,

I was able to replicate one time. Then no more. It acts like a browser hijack inject found it's way into a php file of config file.

Edited to add: Just now tried to go to Kahrtalk through Google on a different computer and ended up on myfilestore.com. so apparently it sets a cookie.

Additional edit: Clear cookies, then Google search Kahrtalk. Click on the link and you end up at MyFilestore.com. Happens with Bing as well.

ESAFO
04-10-2013, 01:21 PM
John,

I was able to replicate one time. Then no more. It acts like a browser hijack inject found it's way into a php file of config file.

Edited to add: Just now tried to go to Kahrtalk through Google on a different computer and ended up on myfilestore.com. so apparently it sets a cookie.

Additional edit: Clear cookies, then Google search Kahrtalk. Click on the link and you end up at MyFilestore.com. Happens with Bing as well.
thank you atleast i know i'm not going crazy now, because thats exactly what was happening to me when i copied & pasted in this thread to show as a example.

Bawanna
04-10-2013, 01:24 PM
I'm feeling just a bit chilly today myself, you think I got it too?

jimsea
04-12-2013, 07:02 AM
Fwiw the redirects continue and occur with several internet devices/locations, ipad, phone, and computer. There is an imbedded code on KT that redirects to other sites. Happens on initial visit to KT, but not subsequent visits.

johnh
04-12-2013, 09:18 AM
The hosting company scanned our system and confirmed we are clean. This is an issue at Google's end. They are somehow feeding a redirect from a past instance when the site was infected. The host changed some settings to force Google to update this info.

jimsea
04-12-2013, 11:06 AM
This is an issue at Google's end. They are somehow feeding a redirect from a past instance when the site was infected. The host changed some settings to force Google to update this info.

You may have something there..........just accessed KT via Yahoo and zero redirects. Yahoooooo.

dkmatthews
04-12-2013, 12:44 PM
Hats off to Tinman & Johnh for diagnosing & solving the problem. Hats off to the OP for posting about it.

:yo:

Tinman507
04-12-2013, 12:52 PM
Hats off to JohnH. He's the guy who ran this one down.

jimsea
04-12-2013, 02:32 PM
.....ahhhhhh shucks. Yahoo is redirecting now. :confused:

ESAFO
04-12-2013, 02:44 PM
yes it is 1rst time i tried to get on today i got redirected, the next time it was fine.
the past 2 days were ok until today, this is really confuseing... :mad:

Tinman507
04-12-2013, 03:03 PM
Be very sure to clear all cache and cookies off your machine. This thing is setting a cookie on your computer. Given that it's some form of malware, do not allow it to stay on your machine.

From now on, bookmark kahrtalk and only come here through the bookmark and not through search engines.

This will be tracked down and fixed, but it's a real chore doing so. Hang in, johnh will get it sorted.

jimsea
04-12-2013, 06:19 PM
Cache and cookie deletes I do regularly. Just bookmarked KT. I'll report tomorrow.

Edit: 4/13 BOOKMARKING definitely eliminates the redirects. Thanks.

johnh
04-15-2013, 08:27 AM
Tracked down to an issue with VBSEO. Should be resolved shortly.

dkmatthews
04-15-2013, 09:50 AM
Tracked down to an issue with VBSEO. Should be resolved shortly.

You rock, sir!

Sent from my SGH-T999 using Tapatalk 2

ESAFO
04-15-2013, 02:29 PM
Tracked down to an issue with VBSEO. Should be resolved shortly.

thank you John, so far so good on my end got logged in no problem.

*UPDATE* i take back what i stated earlier, just got another redirect @ 8:06pm..

jimsea
04-15-2013, 07:36 PM
thank you John, so far so good on my end got logged in no problem.

*UPDATE* i take back what i stated earlier, just got another redirect @ 8:06pm..

Find your way to the site by whatever means and then "bookmark" it. Then in the future you just click your bookmark to come here. No more redirects.

ESAFO
04-15-2013, 07:48 PM
Find your way to the site by whatever means and then "bookmark" it. Then in the future you just click your bookmark to come here. No more redirects.

i have done that in my favorites, it happens when i click the thread link via e-mail.
when somebody posts in a thread i'm subscribed to i get a e-mail notification, i click that link & thats when i get the redirect but it does'nt happen everytime.

RRP
04-15-2013, 07:53 PM
For what it's worth, I never access KahrTalk via Google, or any other search engine, and I have been troubled with redirects. Clearing cookies after each KT visit controls the annoying redirects.

bulletdodger
04-15-2013, 08:34 PM
I've got it a few times too. Another two links pop up instead.

Glock23
04-16-2013, 07:42 AM
I use tapatalk exclusively to read forums, so I have no redirect issues... however, this forum consistently marks forums / sub forums / posts / etc as being read, when I haven't actually read them yet.

And it's only this forum that does it... all others on my tapatalk list work fine.

wyntrout
04-16-2013, 09:04 AM
This current problem seems to be getting worse. I can't do anything but read posts with Firefox. With Chrome I can do a little with work arounds. I just clicked on my screen name went to my info page. I saw that some quotes had been turned into the code equivalents and clicked on edit to fix that. In the text window all of the code was showing so I backed out before I screwed anything else up!:eek:

Wynn:)

Bawanna
04-16-2013, 09:35 AM
Picture test. I don't see any of the issues mentioned. Ooops, I do see I can't click on a smiley.

But I can post a picture.

Technology, can't live with it, and can't live without it.

JFootin
04-16-2013, 11:38 AM
Bawanna, you did that using the "Attach Files" feature, which I have never used. But I just found some workarounds:

To post hot links, just surround the address with "url" and "/url" in blocks.

http://s1230.photobucket.com/user/John_England/media/My%20Custom%20CM9/KahrCM9PolishedLSwMagandBullets.jpg.html?sort=6&o=4

To post a picture, just surround the address with "img" and "/img" in blocks.

http://i770.photobucket.com/albums/xx346/yt82lic/obama-christ_zps3e321bd6.jpg (http://media.photobucket.com/user/yt82lic/media/obama-christ_zps3e321bd6.jpg.html)

And a smily: http://kahrtalk.com/images/smilies/modern/smilies/spider.gif

Bawanna
04-16-2013, 11:49 AM
With all that knowledge and ability that's the best picture you could come up with?

dkmatthews
04-16-2013, 11:50 AM
With all that knowledge and ability that's the best picture you could come up with?

Clearly, he ain't Tinman. He still gets good marks for effort, though! :D

RRP
04-16-2013, 05:02 PM
this forum consistently marks forums / sub forums / posts / etc as being read, when I haven't actually read them yet.


That has been a problem for me, as well, using Chrome. The inconvenience is exacerbated because the <Today's Posts> utility is now missing from <Quick Links>.

JFootin
04-16-2013, 05:29 PM
That has been a problem for me, as well, using Chrome. The inconvenience is exacerbated because the <Today's Posts> utility is now missing from <Quick Links>.

Ditto. ^

Bawanna
04-16-2013, 05:38 PM
Hmmmm, I have a Today's Post until I log in, then I don't have a Today's post but have a New Post which is what I always use anyhow.

I've had a few try to PM me and I get a message but nothing in it, just whatever was there before like a reply.

dkmatthews
04-16-2013, 05:45 PM
That has been a problem for me, as well, using Chrome. The inconvenience is exacerbated because the <Today's Posts> utility is now missing from <Quick Links>.

Ditto, also. ^

Sent from my SGH-T999 using Tapatalk 2

lamppa
04-16-2013, 06:05 PM
:)
;)

http://farm9.staticflickr.com/8188/8128124486_ae6bedd287.jpg (http://www.flickr.com/photos/63928389@N07/8128124486/)
550600_422597471128861_1572583041_n (http://www.flickr.com/photos/63928389@N07/8128124486/) by lump_digity (http://www.flickr.com/people/63928389@N07/), on Flickr

lamppa
04-16-2013, 06:06 PM
two smileys and a picture.
suck it ametuers.

07Dually
04-16-2013, 06:34 PM
I've had a few try to PM me and I get a message but nothing in it, just whatever was there before like a reply.

I am having the same problem!?

wyntrout
04-16-2013, 07:01 PM
What really sucks is that you can type pages and hit Post Quick Reply... and it's just all gone... been there, done that too many times! It really sucks when you've typed a few pages:rolleyes: and you try to post it and get a message saying that your message needs to be at least 3 characters... and your entire post is gone! Been there, done that... too many times!

I hope this gets fixed soon. Chrome sucks because I only use it in emergencies! I don't know much about it!

Wynn:(

RRP
04-17-2013, 01:18 AM
Hmmmm, I have a Today's Post until I log in, then I don't have a Today's post but have a New Post which is what I always use anyhow.

I've had a few try to PM me and I get a message but nothing in it, just whatever was there before like a reply.

Same here, Bawanna. I can see Today's Posts until I log in, then it disappears. Until recently, Today's Post was under a pull-down menu in Quick Links. Now when I click on Quick Links, I no longer get a menu, but the page does refresh and the toolbar changes to display different menu options; none of which are Today's Posts.

Like you, when the site is working properly, I use New Posts almost exclusively. However, now that threads are being marked as read, before I actually read them, Today's Posts would be handy to bring up recent thread activity.

I believe vBulletin displays Today's Posts by default. That's why we see it before we log in. But after we log in, the configuration settings are applied, and that's when Today's Posts disappears. That would suggest there have been changes made to KahrTalk config settings which may be related the the recent wave of problems.

A week ago, there were reports of redirects occurring. Now the problems are increasing. I'm betting the two are related and that KT is the victim of some malicious code. Good luck to the tech crew trying to pinpoint the problem. I wouldn't know where to start looking.

ESAFO
05-10-2013, 05:46 PM
is it just me or are others still getting re-directs :mad:

Tinman507
05-10-2013, 05:50 PM
It's baaaaaack.
Only on a Google search.
Bookmark it and come here directly.

ESAFO
05-10-2013, 06:06 PM
It's baaaaaack.
Only on a Google search.
Bookmark it and come here directly.

it's a habit of mine to just click the link in my e-mail directly to get to this site, i'm like a old man & i'm set in my ways & don't like change.... :31:
LOL

johnh
05-12-2013, 09:16 AM
On it. This only comes up with a Google search. It was VBSEO last time, so not sure yet on this one.

Tinman507
05-12-2013, 09:18 AM
Can you scan the database? That's usually where it hides. It self replicates even after deleting the offending component.

johnh
05-13-2013, 07:13 AM
Same thing as last time. Seems to be one group that likes us.