Strange website keeps popping up

Discussion in 'ARRSE: Site Issues' started by box-of-frogs, Dec 21, 2009.

Welcome to the Army Rumour Service, ARRSE

The UK's largest and busiest UNofficial military website.

The heart of the site is the forum area, including:

  1. box-of-frogs
    Offline

    box-of-frogs LE

    Strange thing happening, whenever i press the 'last 50 posts' button (at the top or bottom of page), i keep getting re-directed to this weird website

    http://rev-advert.com/search.php?

    Done a virus scan and can't find anything. Running Firefox. Anyone else getting this?
     
  2. Litotes
    Offline

    Litotes LE

    Working OK for me on IE7.

    Litotes
     
  3. Sixty
    Offline

    Sixty LE Moderator Book Reviewer
    1. ARRSE Cyclists and Triathletes

    Nothing at this end in either Firefox or Chrome.
     
  4. jinxy
    Offline

    jinxy LE

    You have been (as the youngsters, say. pw0nd) rooted. Smash you pc with a lump hammer. Never ever go on the internet again.

    People like you are a danger too the whole, of the free world!
     
  5. box-of-frogs
    Offline

    box-of-frogs LE

    Thanks. Now in English please.
     
  6. jinxy
    Offline

    jinxy LE

    Scratch your pc and do a full, as new install.
     
  7. old_n_fat
    Offline

    old_n_fat LE

    Do us a favour and remove the link from your post. It may well be infected.
    You have probably been infected. Suggest you google the entire link and see what it brings back.
     
  8. Sixty
    Offline

    Sixty LE Moderator Book Reviewer
    1. ARRSE Cyclists and Triathletes

    Doesn't seem to be anything malicious but I've trimmed the link anyway.

    Not a site related problem as far as I can see.
     
  9. DavidBOC
    Offline

    DavidBOC LE

    Works fine for me using both Safari and Opera.

    Have you been on any dodgy sites lately? Sheep porn perhaps?
     
  10. tommikka
    Online

    tommikka Old-Salt

    In the law of averages it is likely to be triggered by adware.

    Run a spyware scan as well as a virusscan, but preferably in safe mode or at least use ProcssViewer to disable Explorer when scanning.

    It is possible that there is a rootkit infection which will be hidden from standard antivirus & spyware.

    Have a go at the steps described from going to www.oaklandsfestival.com then selecting SERVICES.
     
  11. Gremlin
    Offline

    Gremlin LE Good Egg (charities)

    It isn't site related. His browser has been hijacked by a Malware programme like MySearch, usually acquired whilst downloading something for 'free'.
     
  12. msr
    Offline

    msr LE

  13. eodmatt
    Online

    eodmatt LE

    I ran the sophos one out of idle curiosity and it found a shed(!) load of files, but told me not to do anything with them as it didnt know what they were.
     
  14. chetwisniewski
    Offline

    chetwisniewski

    If you are using the free Sophos Anti-Rootkit and find files of unknown origin, I recommend submitting them to SophosLabs to determine whether they are safe or not. If we are discovering a lot of cloaked files that is usually a bad sign.

    You can submit samples at https://secure.sophos.com/support/samples/

    Chester Wisniewski
    Senior Security Advisor
    Sophos Inc.