Watch this space! AKA What's going on with the site??!?!

[Brian Frey ~ halfmoth]

I'm using Safari, on OS 10.6.8...

[Brian Frey ~ halfmoth]

Oh, and I haven't let the redirect load completely yet... I hit stop, Quit, close the browser, even a Force Quit once before I've seen anything display in my browser. Don't know what it'll be -- porn? pharmaceuticals? I haven't seen its intent. (Probly doing something I won't even see...)

[Eagle]

Try using Google's DNS servers:

http://code.google.com/speed/public-dns/

[Laura]

Huh, weird. I thought I posted about this yesterday...I'm getting the same thing -- the site it tries to redirect to (for me) is ustreamtvonline .rr.nu /2f/ (without the spaces). It doesn't load at all for me. I'll check out the DNS thing. I'm using Firefox 10.0.2 with OSX 10.6.8.

[Eagle]

http://sitecheck.sucuri.net/results/gutterzombie.com

http://sitecheck.sucuri.net/results/dave-co.com

It's reporting both are infected with malware.

I got the link to that scanner here: https://wordpress.org/support/topic/wp-site-hijack

It's about Wordpress sites, but the guy reported his own domain was also redirecting to that ustreamtvonline site.

[Thor]

Win XP Firefox 10.0.2
no problems.

So mac's need antivirus now?

[Eagle]

No, I think it's the site that's compromised. Firefox just doesn't seem to fall for the infection's shit, while some other browsers don't realize something's trying to fool them.

[Ryan]

The exact same hack happened to my webcomics site. Crazy Russians. Didn't have a recent enough back-up, so I'm going to completely redo the site. I'm exploding with frustration at the moment.

[Eagle]

Fuuuuuuuuuuuuck...

[Dean Welsh]

Hey gang I tried to do a SED replace command to fix it (worked on my site when i tried, so i wasn't worried and stupidly didn't backup.) but I borked something in the process.

ANYWAY, I still have everything and it all works and i'll detail how to fix it here (because sounds like some of you have the same issue.)
Basically Lock down your folder permissions and then run a command that gets rid of the encoded garbage in every... goddamned... php file.

but right now I gotta get back to work. so for the time-being... please bear with the default theme until i get a chance to put stuff back together.

Sorry, i've been asleep at the wheel a bit and didn't catch the thread sooner.

EDIT: or I could just link to someone with a helpful how-to http://danhilltech.tumblr.com/post/1808 ... -dreamhost

-dean

[Eagle]

Thanks, Dean!

[Zombie Dave McCaig]

Sorry it took so long to see this, gang!

I've been a bad host for a while now. I'll try to get back on the ball.

[Eagle]

We know you're a busy man!

[Eagle]

The [video] tags don't work no more.

[Reber]

So I just updated my system and found it was infected with a malware program called "Flashback". The OS update removed it but notified me. You get it by visiting infected sites. It sounds like what happened here.

http://www.macrumors.com/2012/05/01/fla ... -10000day/