Strange website keeps popping up

**box-of-frogs** · 21-12-2009, 21:27

Strange thing happening, whenever i press the 'last 50 posts' button (at the top or bottom of page), i keep getting re-directed to this weird website

http://rev-advert.com/search.php?

Done a virus scan and can't find anything. Running Firefox. Anyone else getting this?

**Litotes** · 21-12-2009, 21:31

Originally Posted by box-of-frogs

Strange thing happening, whenever i press the 'last 50 posts' button (at the top or bottom of page), i keep getting re-directed to this weird website

http://rev-advert.com/search.php?

Done a virus scan and can't find anything. Running Firefox. Anyone else getting this?

Working OK for me on IE7.

Litotes

**Sixty** · 21-12-2009, 21:33

Nothing at this end in either Firefox or Chrome.

**jinxy** · 21-12-2009, 21:45

Originally Posted by box-of-frogs

Strange thing happening, whenever i press the 'last 50 posts' button (at the top or bottom of page), i keep getting re-directed to this weird website

http://rev-advert.com/search.php?

Done a virus scan and can't find anything. Running Firefox. Anyone else
getting this?

You have been (as the youngsters, say. pw0nd) rooted. Smash you pc with a lump hammer. Never ever go on the internet again.

People like you are a danger too the whole, of the free world!

**box-of-frogs** · 21-12-2009, 21:51

Originally Posted by jinxy

Originally Posted by box-of-frogs

Strange thing happening, whenever i press the 'last 50 posts' button (at the top or bottom of page), i keep getting re-directed to this weird website

http://rev-advert.com/search.php?

Done a virus scan and can't find anything. Running Firefox. Anyone else
getting this?

You have been (as the youngsters, say. pw0nd) rooted. Smash you pc with a lump hammer. Never ever go on the internet again.

People like you are a danger too the whole, of the free world!

Thanks. Now in English please.

**jinxy** · 21-12-2009, 22:01

Originally Posted by box-of-frogs

Originally Posted by jinxy

Originally Posted by box-of-frogs

Strange thing happening, whenever i press the 'last 50 posts' button (at the top or bottom of page), i keep getting re-directed to this weird website

http://rev-advert.com/search.php?

Done a virus scan and can't find anything. Running Firefox. Anyone else
getting this?

You have been (as the youngsters, say. pw0nd) rooted. Smash you pc with a lump hammer. Never ever go on the internet again.

People like you are a danger too the whole, of the free world!

Thanks. Now in English please.

Scratch your pc and do a full, as new install.

**old_n_fat** · 21-12-2009, 22:01

Do us a favour and remove the link from your post. It may well be infected.
You have probably been infected. Suggest you google the entire link and see what it brings back.

**Sixty** · 21-12-2009, 22:13

Originally Posted by old_n_fat

Do us a favour and remove the link from your post. It may well be infected.
You have probably been infected. Suggest you google the entire link and see what it brings back.

Doesn't seem to be anything malicious but I've trimmed the link anyway.

Not a site related problem as far as I can see.

**DavidBOC** · 21-12-2009, 22:19

Works fine for me using both Safari and Opera.

Have you been on any dodgy sites lately? Sheep porn perhaps?

**tommikka** · 23-12-2009, 00:50

In the law of averages it is likely to be triggered by adware.

Run a spyware scan as well as a virusscan, but preferably in safe mode or at least use ProcssViewer to disable Explorer when scanning.

It is possible that there is a rootkit infection which will be hidden from standard antivirus & spyware.

Have a go at the steps described from going to www.oaklandsfestival.com then selecting SERVICES.

**Gremlin** · 23-12-2009, 01:18

Originally Posted by Sixty

Originally Posted by old_n_fat

Do us a favour and remove the link from your post. It may well be infected.
You have probably been infected. Suggest you google the entire link and see what it brings back.

Doesn't seem to be anything malicious but I've trimmed the link anyway.

Not a site related problem as far as I can see.

It isn't site related. His browser has been hijacked by a Malware programme like MySearch, usually acquired whilst downloading something for 'free'.

**msr** · 23-12-2009, 01:26

Try this http://www.malwarebytes.org and if really paranoid: http://www.sophos.com/products/free-...i-rootkit.html

MSR

**eodmatt** · 23-12-2009, 08:15

I ran the sophos one out of idle curiosity and it found a shed(!) load of files, but told me not to do anything with them as it didnt know what they were.

**chetwisniewski** · 18-02-2010, 22:22

If you are using the free Sophos Anti-Rootkit and find files of unknown origin, I recommend submitting them to SophosLabs to determine whether they are safe or not. If we are discovering a lot of cloaked files that is usually a bad sign.

You can submit samples at https://secure.sophos.com/support/samples/

Chester Wisniewski
Senior Security Advisor
Sophos Inc.