Jump to content

Photo

Njdevs domain redirecting


  • Please log in to reply
20 replies to this topic

#1 Devlin

Devlin

    Senior Devil

  • Members
  • PipPipPipPip
  • 546 posts

Posted 10 January 2013 - 10:25 AM

I had posted this sometime back when I first joined that I kept getting redirected to some AD site...I usually just post via my TAB and tried to access the site this morning using Firefox, I got redirected again.

Thanks!

Sent from my SCH-I800 using Tapatalk 2


  • 0

#2 DevilMinder

DevilMinder

    Owner / Administrator

  • Admin
  • 9,014 posts

Posted 10 January 2013 - 11:26 AM

I get some random shortname redirection website now and then. I can't figure it out. What site did you end up at?
  • 0

#3 Devlin

Devlin

    Senior Devil

  • Members
  • PipPipPipPip
  • 546 posts

Posted 10 January 2013 - 03:13 PM

I just tried it again after seeing your post and now out isn't redirecting!

Was taking me to some short url site with an online AD saying you are about to unlock content which of course locks you into advertisement sites.

Sent from my SCH-I800 using Tapatalk 2


  • 0

#4 StarDew

StarDew

    General Manager

  • Members
  • PipPipPipPipPipPipPipPip
  • 4,704 posts

Posted 10 January 2013 - 04:17 PM

I had similar a while back. Turned out to be malware. Run your malware software in "safe mode" and then see if are okay. May want to do a restore point before you start. I could only find the critter running in safe mode.
  • 0
Dew
So long and thanks for all the fish.
TIMEX RULES!!

"When we were struggling at the beginning of the year we were wondering what was wrong and trying to find reasons. At the end of the day, all we had to do was look in the mirror and the answers were right there." -- Sergei Brylin 12/2/2007

#5 Devlin

Devlin

    Senior Devil

  • Members
  • PipPipPipPip
  • 546 posts

Posted 10 January 2013 - 07:02 PM

I run multiple malware apps below and all come up clean...not sure why it happens on occasion. The account I have setup for this computer is managed via group policy on my network with no admin rights too.<br /><br />Malwarebytes<br />AdAware<br />AVG (anti virus)<br />

Edited by Devlin, 10 January 2013 - 07:04 PM.

  • 0

#6 DevilMinder

DevilMinder

    Owner / Administrator

  • Admin
  • 9,014 posts

Posted 10 January 2013 - 09:42 PM

Same here, I know my PC is clean, and it seems like you hit the same site I do Devlin. I thought it was a random bug, but now its obviously something deeper. I am going to copy the text next time to narrow this down. Thanks for letting me know
  • 0

#7 Devlin

Devlin

    Senior Devil

  • Members
  • PipPipPipPip
  • 546 posts

Posted 10 January 2013 - 10:52 PM

Np at all...I might turn on firebug for my browser and see what it picks up in debug mode...will let you know what I find and email you the output log. :)

Sent from my SCH-I800 using Tapatalk 2


  • 0

#8 RowdyFan42

RowdyFan42

    A Legend

  • Tech Support
  • 12,607 posts

Posted 10 January 2013 - 11:22 PM

Could it have something to do with one of the ads? Supposedly the advertisers aren't allowed to pull tricks like this, but sometimes they embed something in their ads that open up pop-up windows or redirect pages or things like that.

Np at all...I might turn on firebug for my browser and see what it picks up in debug mode...will let you know what I find and email you the output log. :)

Sent from my SCH-I800 using Tapatalk 2


That's a good idea. I'll turn on Firebug too and see what comes up.
  • 0
Posted Image of the Devils' mascot, NJ Devil, and Posted Image of all mascots far and wide.

IT IS VERY HARD TO WIN ONE STANLEY CUP, FORGET ABOUT THREE... and maybe it's high time some of you actually APPRECIATED THAT instead of treating it like it's some flipping birthright because for some random reason you rooted for the damn Devils!!!!! Posted Image


AHLFans.net - American Hockey League fan forums

#9 DevilMinder

DevilMinder

    Owner / Administrator

  • Admin
  • 9,014 posts

Posted 11 January 2013 - 03:48 PM

strangely enough it happened the two times I was being lazy and just googled NJDevs, the google search page sent me to the weird shortname thing.
  • 0

#10 StarDew

StarDew

    General Manager

  • Members
  • PipPipPipPipPipPipPipPip
  • 4,704 posts

Posted 11 January 2013 - 04:38 PM

I run multiple malware apps below and all come up clean...not sure why it happens on occasion. The account I have setup for this computer is managed via group policy on my network with no admin rights too.<br /><br />Malwarebytes<br />AdAware<br />AVG (anti virus)<br />

I suggested running in Safe Mode. I must now assume that you did. I don't trust AdAware and am close to dumping AVG. I use Malwarebyte and a few others. Good luck.

**backs out of thread**
  • 0
Dew
So long and thanks for all the fish.
TIMEX RULES!!

"When we were struggling at the beginning of the year we were wondering what was wrong and trying to find reasons. At the end of the day, all we had to do was look in the mirror and the answers were right there." -- Sergei Brylin 12/2/2007

#11 Devlin

Devlin

    Senior Devil

  • Members
  • PipPipPipPip
  • 546 posts

Posted 11 January 2013 - 05:26 PM

Yep...I ran in safe mode. I use firebug for game development and going to trace what those AD redirect scripts are doing behind the scene.

Sent from my SCH-I800 using Tapatalk 2


  • 0

#12 RowdyFan42

RowdyFan42

    A Legend

  • Tech Support
  • 12,607 posts

Posted 12 January 2013 - 03:56 AM

strangely enough it happened the two times I was being lazy and just googled NJDevs, the google search page sent me to the weird shortname thing.


Yeah, I can reproduce that. It's happened with each of the four browsers I have installed (Firefox, Chrome, Safari, IE), but only the first time I've tried it. It sets a cookie that supposedly prevents the redirection from happening every time you come in. (I suppose I should say it happens every time you arrive via Google without the cookie, not just the first time.) And so far it looks like it's only when coming in from Google; I tried hitting the site directly with an empty cache and no cookies and there was no redirection.

And BTW, it's not just Google, it's Bing too, as I just tried it there. But it's weird that it only happens when you visit the site from a search engine and not if you type in the URL.
  • 0
Posted Image of the Devils' mascot, NJ Devil, and Posted Image of all mascots far and wide.

IT IS VERY HARD TO WIN ONE STANLEY CUP, FORGET ABOUT THREE... and maybe it's high time some of you actually APPRECIATED THAT instead of treating it like it's some flipping birthright because for some random reason you rooted for the damn Devils!!!!! Posted Image


AHLFans.net - American Hockey League fan forums

#13 RowdyFan42

RowdyFan42

    A Legend

  • Tech Support
  • 12,607 posts

Posted 12 January 2013 - 04:23 AM

Okay, make a liar out of me. :P

I thought maybe it was something in the skin itself, so I went in to the admin panel and changed the theme to the IPB default. Cleared out my cookies and cache, went back to Google, clicked on the NJDevs link, no redirection with Ol' Blue Eyes. Progress, methinks. Switched the skin back to the color changer theme, wash, rinse, and repeat. Lo and behold, no redirection again!

So... I think it's fixed? Both times I changed the default theme, the admin panel wrote out fresh copies of all the skin files to the server, so I'm thinking that if there was a problem, it was only with the files that had been there and it went away when the rebuild overwrote everything. Keep your eyes open, though, we'll see if this pops up again.
  • 0
Posted Image of the Devils' mascot, NJ Devil, and Posted Image of all mascots far and wide.

IT IS VERY HARD TO WIN ONE STANLEY CUP, FORGET ABOUT THREE... and maybe it's high time some of you actually APPRECIATED THAT instead of treating it like it's some flipping birthright because for some random reason you rooted for the damn Devils!!!!! Posted Image


AHLFans.net - American Hockey League fan forums

#14 Devlin

Devlin

    Senior Devil

  • Members
  • PipPipPipPip
  • 546 posts

Posted 13 January 2013 - 11:56 AM

So... I think it's fixed? Both times I changed the default theme, the admin panel wrote out fresh copies of all the skin files to the server, so I'm thinking that if there was a problem, it was only with the files that had been there and it went away when the rebuild overwrote everything. Keep your eyes open


So far so good! :)

Sent from my SCH-I800 using Tapatalk 2


  • 0

#15 Devilsfan118

Devilsfan118

    Hall of Famer

  • Members
  • PipPipPipPipPipPipPipPipPip
  • 6,866 posts

Posted 13 January 2013 - 12:19 PM

Just saw this thread and wanted to chime in, I just got sent to that random spammy website from google.

The URL, for what it's worth, was: (CLICK AT YOUR OWN RISK, potential unclean site)

http://url4short.info/a7b7f6f1

I know this computer is 100% clean, so it's not a virus on my end or something like that.

Edited by Devilsfan118, 13 January 2013 - 12:20 PM.

  • 0

believe-ll.jpg

Anyone who says, ‘You played in that New York area,’ I say, ‘No, I played in New Jersey.’ - Ken Daneyko


#16 DevilMinder

DevilMinder

    Owner / Administrator

  • Admin
  • 9,014 posts

Posted 13 January 2013 - 12:52 PM

That is the site I hit as well.
  • 0

#17 DevilMinder

DevilMinder

    Owner / Administrator

  • Admin
  • 9,014 posts

Posted 13 January 2013 - 12:59 PM

Jeez, this hijack is apparently widespread. Looking into it now
  • 0

#18 DevilMinder

DevilMinder

    Owner / Administrator

  • Admin
  • 9,014 posts

Posted 13 January 2013 - 01:06 PM

Okay, I did the official "Fix" from the forum people. Can everyone google "NJdevs" and see if it happens still
  • 0

#19 StarDew

StarDew

    General Manager

  • Members
  • PipPipPipPipPipPipPipPip
  • 4,704 posts

Posted 13 January 2013 - 03:02 PM

No redirect from Google. I don't really use Google except for alerts. I use a less sofisticated non tracking search engine.

So it ended up being a form of malware. I hate that kind that doesn't show up in scans. Sometimes when I get messed up I do a sysptem restore to before the event and don't care if I lose anything as long as my machine is clean again.
  • 0
Dew
So long and thanks for all the fish.
TIMEX RULES!!

"When we were struggling at the beginning of the year we were wondering what was wrong and trying to find reasons. At the end of the day, all we had to do was look in the mirror and the answers were right there." -- Sergei Brylin 12/2/2007

#20 DevilMinder

DevilMinder

    Owner / Administrator

  • Admin
  • 9,014 posts

Posted 13 January 2013 - 03:26 PM

Its a server side malware, apparently uses a database injection nothing the end user can do to stop it.
  • 0




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users