Sticky: Looking for info on redirects to virus scanner sites

[flamethrower Incognito]

I have posted a couple of times reporting that I have information about the EXACT ad that was causing the problems and offering the site admins full network captures and screenshots (for security reasons I can't put screenshots or details of the network captures in a public forum).

My posts are at these URLs:

http://www.gaiaonline.com/forum/t.41805411_1434/#1434
http://www.gaiaonline.com/forum/t.52808433_1/#1

The hijacks have not stopped (I just caught one right now) but I have received word that one of the domains being used to hijack computers has been shut down - obviously there is more than one bad advert. I have also passed the evidence on to Doubleclick so that they can shut down the advert that I have found.

You can read about how the hijack is/was happening here: http://msmvps.com/blogs/spywaresucks/archive/2009/08/03/1712174.aspx

[A Purple Duckie]

1) What browser you're using?
Firefox

2) What area of the world you're in (a rough estimate, like "Southern U.S." is fine - there's a theory it could be geographical)
Southern Ontario, Canada

3) Anything else you can think of that might help us track this down.
I find that when I come on in the morning (I'm on Eastern Time) I rarely get the re-direct if I get it at all. In the afternoon and evening I get it a lot.

On the pages that re-direct there is no advertisement present, just a blank box

I have only been receiving the re-direct to the "virus checker" It appears mostly on the editing and posting pages, but has also appeared on the redirect after posting pages. I don't get it while normally browsing the forums

[flamethrower Incognito]

This is definitely the bad advert:

c3.openx.org/416f7968fd52ccbf9686b55a6a85915c.swf

I reported it to openx.org days ago but they have obviously ignored my report.

The site admins can contact me via the email address recorded in my gaiaonline profile. I'll give them everything they need.

[WTH LMAO]

I use firefox.

I live in southern Texas.

Happens on the forums when I'm switching pages.

[Taco Teddybear]

Im on internet explorer 8

Im in Ontario Canada.

[Ness-eh.]

1) Firefox 3.0.13
2) Sydney, Australia

I have gotten it every time I try to reply, now I press stop before it can redirect to the page. Good luck!

[Cinnamon Swirlz]

1) Internet Explorer 8
2) Alberta, Canada

It happens almost every time I go to make a post, open PMs, and go to the marketplace
I also find it doesn't happen as often in the early morning or late at night, I don't know if that means anything...
And sometimes I get taken to another site, it is usually just a blank page, it's like jessicas blog or something along those lines. That has only happened once or twice, however.

[Princess-Orphelia]

I used Flock but because this happend, i changed to Firefox.
And the problem seems to happening with both browsers.

I am from Sydney Australia.

This happens when i try to open a PM, or when i try to post, or when i go
into 'my Gaia' and also the market place. I get redirected so fast that i does
not give me time to type anything. It takes me to a fake, what appears to be
my hard drive and my files. And tells me that i have a virus. It starts to scan.
But by that time, i have managed to close the window so that it wouldn't continue.

The name of the virus scan seems to change every day. I think i got mine for a PM i was
trying to reply to. Under the reply button, there was an add, that i may have
somehow clicked instead of the reply button. But i am not sure. Perhaps checking the
PM adds may have something to do with it.

I've had to write this out on notepad, otherwise it won't me reply via the post reply
button without redirecting me. Should i learn anything more, i shall be sure to post it on here.

[Lucky~9~Lives]

1) Firefox 3.0.13
2) UK
3) Redirect typically occurs when posting a reply or looking at an item in the Marketplace.

[Pure Evil Inc]

I get the problem while I'm try to post in ED, and when reading my private messages
I'm using Firefox 3.0.13
I'm from the East coast of Australia.

[Kill Hybrid]

1) Google Chrome (latest stable release at this time)
2) Michigan
3) I browsed Gaia with Chrome for several days before that, but only got the redirect when I turned the "Accept Third-Party cookies" option on. Once I changed that, I didn't get the redirect while browsing a few hours afterwards. I'm not sure if that's relevant, but it's the only variable I can think of. I also remember getting it while clicking on a Daily Chance cart. (This would've been onnn Thursday, July 30th around 10 AM EST)

[chaiBENTO]

1) Firefox 3.0.12
2) London, UK.
3) It happens generally when I'm reading my PM inbox or when I'm posting (I got redirected twice while trying to post this.) It doesn't even let the page I visit finish loading before it takes me to a virus scanner with annoying pop-up windows so I have to click them before I click off the tap. Pressing stop or going back a page doesn't help, because it automatically sends me back to the site.

[I stole uzi panties]

Hi your VERY lucky to recieve this post, after this anti software thing did get to the point where I couldnn't post at all.

I'm using firefox and this happens on 2 computers on my account only (my friend can use my computer fine without any problems)

Both of the computers I use are in the UK

Hopes this helps.

[Purplegal]

1) Internet Explorer 8
2)
3) UK
4)
5) It started only when trying to post, now I’m getting it when going into the market place or collecting my daily chance. I cant just close down the tab I’m working on I have to exit out of all windows. Redirection happens once the ads are loaded on the page.