could something be wrong?..

[eskimo]

Have you thought about putting an icon on your desktop/toolbar for the WWF?

Yes, but I will have to delete another to make room for it

[ubeaut]

Steven has been working on this problem. First detected it Tuesday 20th, last week.

Done exhaustive scans of all files and fixed the problem ones Saturday more scans showed us to be free of the problem.

But it's back again and scans will start again.

In the mean time

• Make sure your computer, tablet, mobile etc has good virus protection.
• DO NOT enter any malicious site that comes up. GET OUT OF THE SITE IMMEDIATELY!
• Report any malicious site warnings and how you got to the site here.
• Do not use a search engine to access these forums.
• Bookmark the home page or remember woodworkforums.com and type it in.

Woodwork Forums is not the only one that has been affected by this so be a little wary with all searches. I have tried a number of search engines and all will bring up the same thing so switching from Google to Bing or Yahoo, etc, etc, won't help neither will changing browsers Firefox, Chrome, Opera, IE will all give the same result.

Safest method is to log out which will clear all cookies, log back in by typing in www.woodworkforums.com then when you have finished simply leave the site DO NOT log out. This will preserve site cookies and you shouldn't have to log in again when you return unless you have set your browser or computer to clear cookies at the end of each session.

Hope this is of some help.

Cheers - Neil

[eskimo]

• DO NOT enter any malicious site that comes up. GET OUT OF THE SITE IMMEDIATELY!

So naked lady sites are definitely off limits.....Bugga!

[rob streeper]

Sounds like you have the 'Filestore72" browser hijacker.

http://blog.mitechmate.com/remove-fi...-info-malware/

Did it, all better now. Been seeing this problem for a week or so. Kaspersky has been having a fit and killing the browser.

[Sawdust Maker]

good old kaspersky

[ubeaut]

Just out of interest the scan of the site takes a little over 12 hrs to run last scan showed us uninfected but in the 12 hrs it took to run the mongrels somehow infected us again.

There will be a lot of hours and work thrown at the problem again over the next 24 hrs and this time we hopefully will be free of it.

Cheers - Neil

[eskimo]

Just out of interest the scan of the site takes a little over 12 hrs to run last scan showed us uninfected but in the 12 hrs it took to run the mongrels somehow infected us again.

There will be a lot of hours and work thrown at the problem again over the next 24 hrs and this time we hopefully will be free of it.

Cheers - Neil

It took me ages to realise it wasnt even me that was infected....after doing numerous scans in normal mode and safe mode by kaspersky, malwarebytes, avg, spyhunter etc etc and then doing registry scans for junk etc in norm and safe mode still had me scratching my head...then I thought I wonder ( remembering that I had read somewhere on the net that it can affect Vbulletin site's and their coding) if its WWF and hence my initial post

Any way I hope you get rid of it soon

[Big Shed]

Yes, but I will have to delete another to make room for it

I use Firefox as my browser and on the Firefox toolbar you can actually add more icons than fit on the screen, any icons that don't fit on the screen sit in a dropdown box at the end of the toolbar.

The other thing that helps to put more icons on is to make the description as short as possible, eg WWF for Woodwork Forums, or no description at all.

After my first brush with this pesky re-direction thing it hasn't happened for me again, even when I go from a Google link, which I don't normally do, I just click on the toolbar icon.

I don't log out either as per Neil's suggestion.

[eskimo]

I use Firefox as my browser and on the Firefox toolbar you can actually add more icons than fit on the screen, any icons that don't fit on the screen sit in a dropdown box at the end of the toolbar.

The other thing that helps to put more icons on is to make the description as short as possible, eg WWF for Woodwork Forums, or no description at all.

After my first brush with this pesky re-direction thing it hasn't happened for me again, even when I go from a Google link, which I don't normally do, I just click on the toolbar icon.

I don't log out either as per Neil's suggestion.

I dont log out either

However I have firefox set to NOT remember history or anything so I wonder if its that as to why it always redirects from the google links

If I am in WWF and then also go to wwf via a google links, all is ok.

[ubeaut]

So far today so good. Quick check shows us to be clear but there is still a lot of work in the back room to be done before we can say we are free from this blight. There are a thousand fixes out there and so far most of them are pretty much useless for our purposes.

The bloody thing hides in stealth mode among all sorts of files and in the cache which is easily fixed by deleting cache, but then it comes back again re-installed from another of it's stealthy little hidey-holes. There seem to be a heap of mutations and most scans can't find them. So...........

We just keep our fingers crossed and hope Steven can find every single instance of the bloody thing.

Neil

[eskimo]

Every thing on both pc and mobile is going okay
Looks like you guys got on top of it

[ubeaut]

Pretty sure Steven has been able to fix it fully..... At least for now.

With luck we won't ever see it again, but the malicious bastards are so cunning that anything is possible.

Thank you Steven for the great job and for the long hours spent on what was a pretty difficult and very complex, seek and destroy mission.

A job very well done.

Cheers - Neil

[eskimo]

Pretty sure Steven has been able to fix it fully..... At least for now.

With luck we won't ever see it again, but the malicious bastards are so cunning that anything is possible.

Thank you Steven for the great job and for the long hours spent on what was a pretty difficult and very complex, seek and destroy mission.

A job very well done.

Cheers - Neil

[eskimo]

I was wrong...its back again

how do I know...I keep forgetting that I now have a shortcut on my desktop and keep typing into google "Woodwork Forums"

looks like you'll be working overtime this weekend stephen.....just make sure you get paid for it....

[Cliff Rogers]

Yup, it just tried to take me here but it failed to load.
It took me to WWF by hitting back & clicking the link again.

http://cxtcbqld2ddtovpsa4ztpfj.e-gra...lkPWIxNjkzZTcy