Curse

lordheinous · May 03, 2008, 08:12 AM // 08:12

Hey, I'm just wondering if this is happening to anyone else, and, if not, why its only happening to me. Every time I click on my link to gwguru in my bookmarks, I get a page saying "You are being redirected to XXXXXXX" (don't want to give the site free advertising, I can post the site name if necessary), and then I get redirected to said site. I even googled guru to see if it was somehow a problem with my link, but the same thing happened. I finally was able to get here by using a direct link to a post I had then just navigating the site normally. I also checked for spyware, and found nothing. This happens to none of my other sites. If you know what the problem is, please tell me.

gone · May 03, 2008, 08:17 AM // 08:17

sounds like your browser got snatched.

PM the site admin. they are pretty sure that no one can get a virus or anything from here because this is the biggest site.

/edit
http://www.guildwarsguru.com/forum/s...php?t=10284431

lordheinous · May 03, 2008, 08:50 AM // 08:50

Quote:

Originally Posted by flubber

sounds like your browser got snatched.

PM the site admin. they are pretty sure that no one can get a virus or anything from here because this is the biggest site.

/edit
http://www.guildwarsguru.com/forum/s...php?t=10284431

Several things:
First off, what do you mean by "snatched"? As I stated, this occurs ONLY when I attempt to link to the Guildwars Guru main page, so I don't see what that has to do with my browser.

Second off, I don't get what you're trying to say about gwguru and viruses; I've run both spyware scans and virus scans, and have come up clean, so I'm not even sure what you're getting at.

Finally, I read through the whole link you posted, only to find it was page after page on guildwars accounts getting hacked. My guildwars account is fine (at least it was a couple hours ago lol), so I have no idea why you posted that either.

Snograt · May 03, 2008, 09:12 AM // 09:12

Never heard of this happening before - certainly sounds suspiciously like browser hijack.

It may be spyware that your scanner is not detecting. I access Guru from several different computers, all via Favorites/Bookmarks, and I've never had a re-direct.

Tachyon · May 03, 2008, 03:41 PM // 15:41

Download and run, if you haven't done so already, Spybot S&D, AdAware and Vundofix.

BlueNovember · May 03, 2008, 05:08 PM // 17:08

Quote:

Originally Posted by lordheinous

Every time I click on my link to gwguru in my bookmarks, I get a page saying "You are being redirected to XXXXXXX

Does this behaviour occur if you just type in guildwarsguru.com?

Have you tried looking at that bookmark's url? Perhaps it was changed. (As a prank or by a malicious application).

I would add "Hijackthis" to the list provided by Azagoth.

Stockholm · May 03, 2008, 05:32 PM // 17:32

Quote:

Originally Posted by flubber

sounds like your browser got snatched.

PM the site admin. they are pretty sure that no one can get a virus or anything from here because this is the biggest site.

/edit
http://www.guildwarsguru.com/forum/s...php?t=10284431

Read this before posting statments like that

http://www.guildwarsguru.com/forum/s...php?t=10283360

Inde · May 03, 2008, 05:56 PM // 17:56

Stockholm, first off... flubber was being sarcastic.

2nd off, flubber no such thing was said. In fact we not only acknowledged but had it fixed within 24 hours. Some of the other problems people are posting in that thread are not tied to guru from what we can see. Also, the only person reporting such a malicious virus readily admits to having no anti-virus, not doing any updates and basically no security whatsoever so I take their "explanation" of what the virus may be doing and where it came from as absurdly false taking into account the conversations I had with some users who did know what was on their PC before it happened. It only affected IE users as well, not firefox users and if you had some basic anti-virus in place it caught it. Without it using a virus scan cleared it up.

I have thoroughly looked into the virus' and know what they do. Hijacking a browser could potentially be linked except that the OP himself stated nothing came up in his virus scanner.

Have you tried re-bookmarking the site? Please let me know if it continues after that and what browser you are using lordheinous.

lordheinous · May 03, 2008, 07:33 PM // 19:33

Quote:

Originally Posted by Inde

Stockholm, first off... flubber was being sarcastic.

2nd off, flubber no such thing was said. In fact we not only acknowledged but had it fixed within 24 hours. Some of the other problems people are posting in that thread are not tied to guru from what we can see. Also, the only person reporting such a malicious virus readily admits to having no anti-virus, not doing any updates and basically no security whatsoever so I take their "explanation" of what the virus may be doing and where it came from as absurdly false taking into account the conversations I had with some users who did know what was on their PC before it happened. It only affected IE users as well, not firefox users and if you had some basic anti-virus in place it caught it. Without it using a virus scan cleared it up.

I have thoroughly looked into the virus' and know what they do. Hijacking a browser could potentially be linked except that the OP himself stated nothing came up in his virus scanner.

Have you tried re-bookmarking the site? Please let me know if it continues after that and what browser you are using lordheinous.

I am using firefox.

Also, I tried to re-bookmark it by going to the main page and adding it to my bookmarks, and it does get me successfully to this site. The old bookmark however still redirects, as does typing in www.guildwarsguru.com, which is what the old bookmark is linked to. However, the new bookmark is linked to www.guildwarsguru.com/index.php, which, when typed in, takes me successfully to this site.

In short:
Typing in, using a bookmark, or even using a google link to www.guildwarsguru.com redirects me, but typing in or using a bookmark to www.guildwarsguru.com/index.php successfully gets me here.

kvndoom · May 03, 2008, 08:21 PM // 20:21

Check your HOSTS file? I dunno...

Hengis · May 04, 2008, 12:20 PM // 12:20

I agree with the post above.. Sounds very much like your Hosts file has been compromised.

Have a look at:

\windows\system32\drivers\etc\hosts

Open it with Notepad.

See if there are any rogue entries there.