Starting about a week ago I’ll get randomly redirected to an offsite page while looking at recipes. It only happens on recipe pages. This time I just got redirected to a page @ http://www.ibtimes.co.uk/ I’m not suggesting you go there or anything, just posting details. Previously I’ve been redirected to some food website and another one was a fake Microsoft site saying I have a virus.
First I assumed it was spyware, but none of my apps are detecting anything (spybot/malwarebytes). I also use ESET for AV, and that doesn’t find anything either. Before I dig deeper with more spyware tools, I wanted to know if anyone else is having this problem.
I’ve not experienced this, but I’m guessing @daath would be able to say one way or the other if this was some sort of advertising thing or not.
I’m not sure if you’re using any add ons or extensions, but those can sometimes do weird stuff. I had one that I used for downloading all of a professor’s slides from class (he posted them as a bunch of jpeg images on a webpage) and it wound up changing every instance of the word “shopping” on every webpage I visited into really obnoxious ad links.
If none of those are detecting anything, then I’d feel pretty safe, and this is a lot of what I do for a living. You could try SuperAntiSpyware, my other go-to anti-malware software, if you’re willing. But if it is spyware that’s not detected by that group, then you may be in trouble. And by “trouble” I’d actually suspect that you’d be in a world of annoyance.
Can you try another browser? And/or the same browser but with all add-ons and extension disabled? Google for “safe mode” for your browser.
As a last bit of paranoia, try heading over to bleepingcomputer.com and run a HiJackThis report and anything else they recommend.
Do you know of a specific recipe that caused the issue? And does it happen every time on that recipe page?
Thanks for the replies. I do have a few extensions installed that are not necessary so I’ll get rid of those. I haven’t tried another browser or Chrome safe mode, but I’ll try that and Firefox. Doesn’t seem to be specific to any one recipe. It’s happened on at least 3 of mine and other random ones, but it’s not consistent other than recipe pages in general.
Speaking of Adblock, I have it disabled on ELR because it’s always blocked the percentages/amounts of recipe flavorings, but that was long time ago when I did that so maybe it’ll work better now.
I’ll check out the tools @Scottes777 listed. I’ve been out of the loop as far as those tools go since I started using Malwarebytes because it’s usually worked out well for me. Thanks for all your suggestions guys… and girls.
Malwarebytes always works for me to find them little pesky re-directors,
You could also run Comodo cleaning essentials, I use that a lot in my line of work as an IT technician, that and malewarebytes together to remove 99% of whatever.
It does sound like a redirect (browser hijacker)
here is the link to it, just choose either 64 bit or 32 bit
A few days ago there appeared to have been a rogue ad on one of the networks. I tried to identify the source but couldn’t get it to repeat, so I assume that whoever was responsible for the origin network caught it and eliminated it…
If you stumble across anything suspicious, I’d love to hear it. The ad people I use are usually good at spotting and banning the bad ones…
EDIT: It sounds like you met one - albeit a milder one; mine redirected me through a complex path through to some porn and dating sites…
You can also run Hijack This. It has worked for me in the past to help my numb nuts brother get his mojo back. If you have a browser hijack, get rid of it! I swear some of them can weasel their way deep into your OS if left unhindered.
Just so all the new folks are aware, I am a volunteer, so I’m not saying this cuz it’ll benefit me in any way. Because I know he’s too nice to say anything ( ), keep in mind that ELR is ad supported and using adblock prevents Daath from receiving any revenue from the site. If you don’t want ads, you might consider a donation instead; $10+ and a request to him and he’ll remove the ads on your account. The donate link is at the very bottom of your “My Page.”
If it happens again is there some kind of browser log I should send you, or maybe just the URL? I’m using Chrome but also have the site open in Firefox. If any info would help lemme know and I’ll try to get it.
I’ve also been seeing them for the past week or so. Not on my end, running malwarebytes and BD. Very suspicious. Google chrome with no hidden extensions.
Yeah, the biggest threat about HiJackers…is not what they do, but where they lead you to going.
They simply conduct the traffic TO the payload sites. It’s where you land that the real threats usually exist! The sooner you fix the hijack, the safer your outcome (typically)!
), keep in mind that ELR is ad supported and using adblock prevents Daath from receiving any revenue from the site. If you don’t want ads, you might consider a donation instead; $10+ and a request to him and he’ll remove the ads on your account. The donate link is at the very bottom of your “My Page.” 