[Polly]

Nothing like this has ever happened anywhere else on the net - just here on the ST forum.

Pol

Just to let you know it's now happening when I'm on the MAIN homepage too. If I'm browsing the main ST homepage, it redirects after a few seconds.

Polly

[Irma]

I used IE in the morning and I was redirected... so I started Netscape 7.2 and I am working with it... till now I haven't been redirected... It's working fine... It would be interesting to know if there were some other members using IE and they had the problem...

[adam]

Now whenever I open Shuttertalk my computer suddenly jams up and goes so slow.

[Irma]

Another one comes to the club !! G was redirected just few minutes ago

[shuttertalk]

I've been doing more research... the more I read, the more paranoid I'm becoming!!

This one was an exact match for the site we're being redirected to... no answer though:
http://groups.google.com.au/group/tecnic...7ff4e3d367

Here are some things which sound like what we're experiencing:
http://groups.google.com.au/group/micros...3946c90e17
http://groups.google.com.au/group/micros...4be39f97cb
http://vil.nai.com/vil/content/v_100719.htm

[slejhamer]

I know! I know!

It's George "Dubya" Bush's fault!

Heck, people are blaming him for the destruction of New Orleans, so why not malicious code? And my bad hard drive!!!



Anyway, on topic: I wonder if everyone who is now "in the club" clicked on the link to that site? I did not, and I have not had a problem.

Also, Jules, do you do business with a company called AdBrite? And does your site really get 1,400 pageviews per day? And 490 unique viewers per day? :|

[Irma]

ST, I have validated the pages with W3C.org HTML validator and the page we are redirected has the error #29 that caught my attention... here is the word "extreme" that I see when I am redirected.

http://validator.w3.org/check?uri=http%3...asics.html

The home page of the site has a warning about it in #126...

http://validator.w3.org/check?uri=http%3...ace.com%2F

[shuttertalk]

Anyway, on topic: I wonder if everyone who is now "in the club" clicked on the link to that site? I did not, and I have not had a problem.

Well I clicked on the link many times over, and still am not part of the club...

Also, Jules, do you do business with a company called AdBrite? And does your site really get 1,400 pageviews per day? And 490 unique viewers per day? :|

Yup, they serve some of the ads on the right and bottom of the page. Re: the stats, *shrug* dunno... that's what they report... it's based on how many times the ads are requested from the server, so I guess it must be right...

[Polly]

I've done a thorough scan with "The Cleaner" a couple of times (yesterday and today) as well as Hijack This and the usual daily Norton Internet security scans .... so I'm certain my PC is clean - also certain the redirected page isn't sneaking anything nasty into my PC. I deliberately left everything in the cache when i did this morning's scans ...... knowing I'd been here to ST and been redirected to the atspace.com page.

I can't help wondering if it's something linked to one of the ad strings, perhaps aimed more towards European visitors?

Would it be possible for you to block that atspace domain so they can't advertise on ST or maybe discuss what's happening with advertisers with whom you have an advertising a/c for the ST site? Could it be that the offenders have hacked someone else's advertising space so the redirect happens whenever the legit ad appears somewhere?

Dunno what else to suggest?

Pol

[guerito]

A picture says more than words...



This is just the first of a series of virus warnings I got when I went to the page. Are you really sure everything is ok, Julian? Don't you want to join the club?

[Rufus]

Oh blimey!!! :o

[slejhamer]

Eeek! :o

[guerito]

I think I found something interesting - I went to internet options and changed my relatively trusty settings to rather distrusting ones, which means everything suspicious causes a prompt or is blocked completely. With these settings I don't seem to get the virus message anymore. I changed a lot of settings so I don't know what exactly was the problem, I might test this thoroughly when I got time.

[Polly]

I think I found something interesting - I went to internet options and changed my relatively trusty settings to rather distrusting ones, which means everything suspicious causes a prompt or is blocked completely. With these settings I don't seem to get the virus message anymore. I changed a lot of settings so I don't know what exactly was the problem, I might test this thoroughly when I got time.

I haven't changed any setting in my firewall, Norton internet security or anything else ... never got any Trojan or virus alerts either (The Cleaner and Norton AV and Firewall are running all the time in the background)

So - I changed nothing, got no alerts BUT the problem seems to have cleared. I've been coming back and forth to ST for about a couple of hours and NEVER been redirected.

I've also done another 'Cleaner' scan and Norton scan and the PC remains clean. Maybe it was all due to an ad string? Dunno? Main thing is all is well again here, no more intrusive redirect pages today.

Pol

[Petographer]

I have found that it has also stopped. Things are actually running fairly well.

[shuttertalk]

mein gott!!

I'll continue investigating away - in the meantime, if you haven't already - I'd recommend that everyone increase your browser security settings... or even better - use firefox...