Re-direct from Google

Status
Not open for further replies.

James Wall

Senior Member
ECF Veteran
Sep 23, 2010
132
18
53
DFW
So I was reading the attached story on the thread about the deputy director of the FDA resigning and when I finished and tried to come back to the forum I was re-directed to "Canadian Healthcare the internet's #1 on line pharmacy". Where it's trying to sell e-cigs. :confused: Now everytime I try to get here from Google it re-directs me there. I can get here by directly entering the URL I'm just wondering if anyone else is having this issue?
 

rolygate

Vaping Master
Supporting Member
ECF Veteran
Verified Member
Sep 24, 2009
8,354
12,406
ECF Towers
You have a local infection on your PC, spyware that redirects you. If you have what seems to be a relatively good security set-up, and scans show nothing, then you've got a rootkit, and often the standard antivirus / anti-malware stuff can't find those things, never mind remove them.

See this forum for assistance:

Computer Security
 

Lee1111

Senior Member
ECF Veteran
Verified Member
Apr 2, 2010
197
44
here
I'm thinking its contained to this local computer here at school, but everytime I search for anything on ecf from google the link will take me to this page. "We Always Have The Cheapest Offers In Our Online-Drugstore" Hope its just this machine and not something with the forum. thanks.
 
Last edited by a moderator:

dearler

Full Member
Mar 5, 2010
24
0
Oregon
Definitely not an infection, I've tried it on 3 machines plus a couple at work and all saw the same thing. I even called up a friend who saw the same thing. I thought it could be DNS poisoning so I switched from Comcast DNS servers to OpenDNS, flushed my local DNS cache and still got the same thing. Happens in IE and Chrome with and without scripts on. Blocking the Google ads didn't seem to make a difference either. Oddly, if you copy the link and paste it into the browser it works fine but clicking it does the redirect. The Computer Security forum link a few posts up redirects for me if clicked but copying the link and pasting works fine.

For the sake of double-checking I scanned with NIS, MBAM, and ComboFix and they all came back clean.

At that point I ran a Wireshark to see what was going on and it shows a response from this site issuing a redirect to the cool-smile site.
 

Mobius_13

Senior Member
ECF Veteran
Dec 12, 2010
133
2
46
Hanover, PA
Try signing out of the forum and then use the Google link. If you remain signed in to the ECF and just close the window, you will be sent here, but when I signed out, Google sent me to the Canadian site.

Yeah, that did the trick. Was redirected to cool-smile.

ecigs and ......, what a combo.... lol
 

MrsJaaxx

Unregistered Supplier
ECF Veteran
Feb 16, 2009
824
36
49
Atlanta, GA
www.juicyliquid.com
This happened just today on my work computer (not JuicyLiquid-- we use Linux, but the computer at the law office.) Evidently my google search results are hijacked. Clicking on any google search result sends me to advertising sites. Our computer guy is coming in the morning to fix it. I'll be glad to share what he does to correct the problem, if it's simple enough that I can understand and relay it.
 

MrsJaaxx

Unregistered Supplier
ECF Veteran
Feb 16, 2009
824
36
49
Atlanta, GA
www.juicyliquid.com
I take that back. Well, yes, my work computer does have hijacked search results, but this with ECF is a totally separate issue, specific to ECF. If I log out and try to come here from search results, on my home computer, which runs Linux Mint and is not going to pick up a virus or rootkit dealie, it goes to the Canadian site. Just like it's doing for everyone, evidently.
 

dmdonald2

Ultra Member
ECF Veteran
Verified Member
Aug 18, 2010
1,415
192
43
michigan
Try signing out of the forum and then use the Google link. If you remain signed in to the ECF and just close the window, you will be sent here, but when I signed out, Google sent me to the Canadian site.

That did it for me to. I did notice earlier that when I clicked on new posts that it took me to a message that said redirecting and something else that I don't remember, and then it would take me to the new posts. It did this for about 3 clicks and is now is gone. I don't know if it has anything to do with this but it is the first time I have seen this except for when I log on.
 
Status
Not open for further replies.

Users who are viewing this thread