Watch this space! AKA What's going on with the site??!?!

shoot the breeze. Movies, comics, potatoes. Whatever.

Moderators: Zombie Dave McCaig, Reber, Laura, Dean Welsh, Scott Johnson

Re: Watch this space! AKA What's going on with the site??!?!

Postby Brian Frey ~ halfmoth » Mon Mar 05, 2012 11:16 am

I'm using Safari, on OS 10.6.8...
== pleasant taste; some monsterism ==
ImageImage
User avatar
Brian Frey ~ halfmoth
Überzombie
 
Posts: 1545
Joined: Tue Sep 16, 2003 11:43 am
Location: Atlanta

Re: Watch this space! AKA What's going on with the site??!?!

Postby Brian Frey ~ halfmoth » Mon Mar 05, 2012 11:19 am

Oh, and I haven't let the redirect load completely yet... I hit stop, Quit, close the browser, even a Force Quit once before I've seen anything display in my browser. Don't know what it'll be -- porn? pharmaceuticals? I haven't seen its intent. (Probly doing something I won't even see...)
== pleasant taste; some monsterism ==
ImageImage
User avatar
Brian Frey ~ halfmoth
Überzombie
 
Posts: 1545
Joined: Tue Sep 16, 2003 11:43 am
Location: Atlanta

Re: Watch this space! AKA What's going on with the site??!?!

Postby Eagle » Mon Mar 05, 2012 12:29 pm

Try using Google's DNS servers:

http://code.google.com/speed/public-dns/
User avatar
Eagle
Überzombie
 
Posts: 6078
Joined: Wed Feb 07, 2007 1:54 pm
Location: French-Québecois

Re: Watch this space! AKA What's going on with the site??!?!

Postby Laura » Tue Mar 06, 2012 10:06 am

Huh, weird. I thought I posted about this yesterday...I'm getting the same thing -- the site it tries to redirect to (for me) is ustreamtvonline .rr.nu /2f/ (without the spaces). It doesn't load at all for me. I'll check out the DNS thing. I'm using Firefox 10.0.2 with OSX 10.6.8.
User avatar
Laura
Crazy cat lady
 
Posts: 6179
Joined: Sat Mar 29, 2003 8:30 pm
Location: Atlanta, GA

Re: Watch this space! AKA What's going on with the site??!?!

Postby Eagle » Tue Mar 06, 2012 10:26 am

http://sitecheck.sucuri.net/results/gutterzombie.com

http://sitecheck.sucuri.net/results/dave-co.com

It's reporting both are infected with malware.

I got the link to that scanner here: https://wordpress.org/support/topic/wp-site-hijack

It's about Wordpress sites, but the guy reported his own domain was also redirecting to that ustreamtvonline site.
User avatar
Eagle
Überzombie
 
Posts: 6078
Joined: Wed Feb 07, 2007 1:54 pm
Location: French-Québecois

Re: Watch this space! AKA What's going on with the site??!?!

Postby Thor » Tue Mar 06, 2012 1:39 pm

Win XP Firefox 10.0.2
no problems.

So mac's need antivirus now?
User avatar
Thor
Fresh Meat
 
Posts: 18
Joined: Tue Feb 07, 2012 1:08 pm

Re: Watch this space! AKA What's going on with the site??!?!

Postby Eagle » Tue Mar 06, 2012 1:52 pm

No, I think it's the site that's compromised. Firefox just doesn't seem to fall for the infection's shit, while some other browsers don't realize something's trying to fool them.
User avatar
Eagle
Überzombie
 
Posts: 6078
Joined: Wed Feb 07, 2007 1:54 pm
Location: French-Québecois

Re: Watch this space! AKA What's going on with the site??!?!

Postby Ryan » Wed Mar 07, 2012 7:16 pm

The exact same hack happened to my webcomics site. Crazy Russians. Didn't have a recent enough back-up, so I'm going to completely redo the site. I'm exploding with frustration at the moment.
Ryan Christopher Lord
My Deviant Art » RyanLord.com
My Dribbble » dribbble.com/ryanlord
User avatar
Ryan
Überzombie
 
Posts: 1084
Joined: Wed Feb 04, 2004 9:09 pm
Location: Ruston, LA

Re: Watch this space! AKA What's going on with the site??!?!

Postby Eagle » Thu Mar 08, 2012 4:33 am

Fuuuuuuuuuuuuck... :(
User avatar
Eagle
Überzombie
 
Posts: 6078
Joined: Wed Feb 07, 2007 1:54 pm
Location: French-Québecois

Re: Watch this space! AKA What's going on with the site??!?!

Postby Dean Welsh » Thu Mar 08, 2012 12:15 pm

Hey gang I tried to do a SED replace command to fix it (worked on my site when i tried, so i wasn't worried and stupidly didn't backup.) but I borked something in the process.

ANYWAY, I still have everything and it all works and i'll detail how to fix it here (because sounds like some of you have the same issue.)
Basically Lock down your folder permissions and then run a command that gets rid of the encoded garbage in every... goddamned... php file.

but right now I gotta get back to work. so for the time-being... please bear with the default theme until i get a chance to put stuff back together.

Sorry, i've been asleep at the wheel a bit and didn't catch the thread sooner.

EDIT: or I could just link to someone with a helpful how-to http://danhilltech.tumblr.com/post/1808 ... -dreamhost

-dean
John Rauch wrote:I think it's time to change your signature.
User avatar
Dean Welsh
Magical Cowboy
Magical Cowboy
 
Posts: 4347
Joined: Sun Mar 30, 2003 11:56 pm
Location: Vegreville, City of Wonders

Re: Watch this space! AKA What's going on with the site??!?!

Postby Eagle » Thu Mar 08, 2012 12:28 pm

Thanks, Dean!
User avatar
Eagle
Überzombie
 
Posts: 6078
Joined: Wed Feb 07, 2007 1:54 pm
Location: French-Québecois

Re: Watch this space! AKA What's going on with the site??!?!

Postby Zombie Dave McCaig » Thu Mar 08, 2012 4:02 pm

Sorry it took so long to see this, gang!

I've been a bad host for a while now. I'll try to get back on the ball.

:)
Prepare the mental-bleach solution of two parts whiskey to two parts whisky.
User avatar
Zombie Dave McCaig
Clownshoes
Clownshoes
 
Posts: 12061
Joined: Sat Mar 29, 2003 1:29 pm
Location: Vancouver, Canada

Re: Watch this space! AKA What's going on with the site??!?!

Postby Eagle » Thu Mar 08, 2012 5:34 pm

We know you're a busy man!
User avatar
Eagle
Überzombie
 
Posts: 6078
Joined: Wed Feb 07, 2007 1:54 pm
Location: French-Québecois

Re: Watch this space! AKA What's going on with the site??!?!

Postby Eagle » Tue Mar 20, 2012 11:40 pm

The [video] tags don't work no more.
User avatar
Eagle
Überzombie
 
Posts: 6078
Joined: Wed Feb 07, 2007 1:54 pm
Location: French-Québecois

Re: Watch this space! AKA What's going on with the site??!?!

Postby Reber » Mon May 14, 2012 8:18 am

So I just updated my system and found it was infected with a malware program called "Flashback". The OS update removed it but notified me. You get it by visiting infected sites. It sounds like what happened here.

http://www.macrumors.com/2012/05/01/fla ... -10000day/
User avatar
Reber
What the hell is my avatar DOING?
 
Posts: 2817
Joined: Sat Mar 29, 2003 3:28 pm
Location: Atlanta, GA

PreviousNext

Return to Sunshine and Rainbows

Who is online

Users browsing this forum: No registered users and 7 guests

cron