Sticky: Looking for info on redirects to virus scanner sites

[biglanky14]

Hi everyone,

We've seen the various threads across the forums about some of you getting redirected to a "virus scanner" site when you try to click on various areas of Gaia. This is obviously isn't good, and our devs are working as we speak to try to reproduce this so they can investigate. But we could use your help as well.

If this has happened to you, can you share the following information on this thread:

1) What browser you're using?
2) What area of the world you're in (a rough estimate, like "Southern U.S." is fine - there's a theory it could be geographical)
3) Anything else you can think of that might help us track this down.

Thanks!

Update (8/6) - also posted later in the thread.

Hi everyone,

Thanks for all the info - it was really helpful! We think we've got the issue resolved, but I'll keep this thread going for a bit in case people are still seeing this.

[Stop Touching My Fetus]

I was using Firefox.
I'm in Orange County, California.

Edit: Holy smuckers. First post. cool

[Izzy Van Helsing]

Firefox, Atlantic Canada region.

I find using the add-on 'Noscript' works really well, if anyone's wondering what to do for now, though.


Also, I wasn't just getting the virus scanner site. There was some celebrity site (JessicaSimpsonblog, or something like that) that I was getting too.

[a r o u r o]

1) Firefox, but I tried it on Explorer too, and I got redirected on that too.
2) Eastern Canada
3) It happens to me whenever I'm in the forums. When I'm opening a thread, clicking the next page on the thread, etc. It always happens to me when I'm trying to post a reply.

I'm glad this is getting investigated. It is quite annoying and some of the younger users of Gaia may fall for its trap.

[Chibi Mizu Thing]

Latest version of Firefox - 3.0

Southeastern coast of the US.
It's random when it happens, though when it does,
I just immediately alt+f4 Firefox and start anew.

[Hikari Tokoyami]

I'm using FireFox 3.5 latest version and I live in Eastern Canada. It usually occurs when I'm about to post something.

[Shinzokuyo]

Izzy Van Helsing

Also, I wasn't just getting the virus scanner site. There was some celebrity site (JessicaSimpsonblog, or something like that) that I was getting too.

There's where the virus is coming from.
And on a extra note, the ad is hosted by Yahoo.

[rena_gold]

Thankfully I've only ever had this problem once (so far). I was browsing the marketplace at the time. Make that twice. I was just in the marketplace and got the redirect again.

Browser: Firefox 3.5
Location: Atlantic Canada

[Tempting Mistress]

http://onlinesecuritydefenderv9.com/1/?sess==GQ21jzwOS00MCZpcD0yMDMuMzkuNjkuMTI2JnRpbWU9MTI0MTQwNM0MaQ=O

[Kitsune no Madoka]

Safari.
Great Lakes region in Canada.
I had a thread in the Q&A open.

Dx Poor mule.

[Lapinporokoira]

1) FireFox
2) UK
3) It only ever happened when I tried to reply to a post or start a new Thread.

(and noscript for Firefox works brilliantly against it)

Edit: If it helps on the noscript bar it is currently allowing, google-analytics.com, gaiaonline.com, quantserve.com, doubleclick.net, about: blank . And that is 5/6 allowed. The 6th is probably the guilty party.

[Djubre]

Browser: IE
Location: Australia

AdBlock Plus works fine for FF, but I'm on a school computer.

[Arcade Star Dahlia]

I have NOT been getting Ads. I use FireFox in West South West America. I hope this helps explain if it's because of region.

[Bibbly]

Fire Fox, Manitoba Canada

I get redirecting sites like the virus scan site and a Jessica Simpson blog site when I go to post or edit a post in any thread or forum and also when search in the marketplace. I also get redirected when I have successfully posted.

I get redirected in EVERY forum and thread I post in and every search.

Redirecting seems to be only happening in these two areas.

The site I keep getting is:
http://iwishscanforvirus.com/1/?sess==2Q30jTwOS00MCZpcD03NC4yMTYuMTI2LjEyJnRpbWU9MTI0MTQwOg0MaQ=N

This is hard to track and block because it's a script and not a banner.