Page 1 of 2 12 LastLast
Results 1 to 15 of 24

Thread: Weird redirect when accessing from Google???

  1. #1
    Your mum is a Conversion King TERRA Operative's Avatar
    Join Date
    Mar 2007
    Location
    Chiba
    Posts
    2,232

    Exclamation Weird redirect when accessing from Google???

    I've been noticing a weird redirect thing happening when accessing the forums from a Google search. It happens the first click, but when you close the tab and try again, it links to the correct Toymods page.

    The URL it links to is http://ad.leadbolt.net/ or similar (Don't click on it) but because I have noscript and adblock etc, I personally don't see anything anyway.


    Just letting you guys know..

  2. #2
    Junior Member Backyard Mechanic greywolf's Avatar
    Join Date
    Sep 2006
    Location
    Nsw
    Posts
    355

    Default Re: Weird redirect when accessing from Google???

    Check your pc throughly.

  3. #3
    Your mum is a Conversion King TERRA Operative's Avatar
    Join Date
    Mar 2007
    Location
    Chiba
    Posts
    2,232

    Default Re: Weird redirect when accessing from Google???

    My PC gets checked on at least a fortnightly basis, using multiple methods, and it is currently coming up clean.

    It *only* happens with Toymods, no other site ever does it.

  4. #4
    Forum Member 1st year Apprentice
    Join Date
    Dec 2005
    Location
    Qld
    Posts
    15

    Default Re: Weird redirect when accessing from Google???

    A quick search on "url123 redirect" (the page that the redirect takes you to) points out it might be a vBulletin security issue.

    virus redirect url123.info - vBulletin.org Forum


    Same issue as in thread here > http://www.toymods.org.au/forums/for...-toolbars.html
    Last edited by blankspace; 08-04-2012 at 11:04 PM. Reason: added link to existing thread
    MX22 (x2) | MX10 | RN90

  5. #5
    Fear the Rapeodile Carport Converter blakeg's Avatar
    Join Date
    May 2006
    Location
    NSW
    Posts
    1,471

    Default Re: Weird redirect when accessing from Google???

    yeah its a toymods issue. only happens on toymods for me . and pc is clean

  6. #6
    1MZ > 2JZ Carport Converter knightrous's Avatar
    Join Date
    Jul 2009
    Location
    NSW
    Posts
    1,785

    Default Re: Weird redirect when accessing from Google???

    Happens to me as well on both Mac and Linux systems. I run the No Script plug in on FireFox and it stalls the webpage from doing it's XSS shit. Not just toymods though, seen a few other pages I've tried to access from google do the same thing.

  7. #7
    Toymods Club Member #194 Conversion King Lambolica's Avatar
    Join Date
    Jul 2005
    Location
    NSW
    Posts
    2,111

    Default Re: Weird redirect when accessing from Google???

    We are aware of this, and it appears that the recent update as of friday night didn't fix it.

    If you are affected I would suggest clearing your cookies for Toymods. Thou I doubt this will help.

    Cheers
    Simon
    Beige.... The new Black!!!

  8. #8
    Administrator Backyard Mechanic
    Join Date
    Jul 2009
    Location
    NSW
    Posts
    250

    Default Re: Weird redirect when accessing from Google???

    It is a server side infection, not a client one...

    The vbulliten patches stops you from getting infected, but once you are infected you need to clean it manually

  9. #9
    Toymods Club Member #194 Conversion King Lambolica's Avatar
    Join Date
    Jul 2005
    Location
    NSW
    Posts
    2,111

    Default Re: Weird redirect when accessing from Google???

    Yes, it is Sever side, yes there was a manual sweep done.

    Will be looking at this closer again today.

    Cheers
    Simon.
    Beige.... The new Black!!!

  10. #10
    Junior Member Backyard Mechanic greywolf's Avatar
    Join Date
    Sep 2006
    Location
    Nsw
    Posts
    355

    Default Re: Weird redirect when accessing from Google???

    Just wanted to clarify I only said to check your PC because it's the first thing you need to confirm has been done.

    I hadn't encountered the problem myself since I've been using my PC (with auto complete for the URL) so I didn't need to go to Google to find Toymods.

    Anyone who has experienced the problem seen an resolution yet ?

  11. #11
    Administrator Backyard Mechanic
    Join Date
    Jul 2009
    Location
    NSW
    Posts
    250

    Default Re: Weird redirect when accessing from Google???

    Nup it is still broken... if you go back though you get to toymods without the redirect.

    The vbulliten patch you applied was it...

    Latest version available: 4.1.11 Patch Level 1

  12. #12
    Forum Member 1st year Apprentice
    Join Date
    Apr 2012
    Location
    QLD
    Posts
    13

    Default Re: Weird redirect when accessing from Google???

    happens here sometimes

  13. #13
    Toymods Club Member #194 Conversion King Lambolica's Avatar
    Join Date
    Jul 2005
    Location
    NSW
    Posts
    2,111

    Default Re: Weird redirect when accessing from Google???

    The Latest was 4.1.11 + the patch over that done Thursday of last week.

    My guess is that the issues on the server haven't yet been fully cleansed in all the files.

    Just to clarify for everyone, the issue is when clicking a link from a google search result, the search is redirected to an alternate site a % of the time (10-50% of searches). Whilst there are cookies involved, the cause is a script that has been placed in the server through a weakness in the vbulletin code somewhere, not a virus on your computers. The script appears to be mostly harmless at this stage other than what is contained on the site(s) that one is redirected to. That being said it is an inconvenience, and based on how the script is placed in the server suggests a potential threat.

    Cheers
    Simon
    Beige.... The new Black!!!

  14. #14
    Forum Member 1st year Apprentice
    Join Date
    Jul 2005
    Location
    Amman
    Posts
    37

    Default Re: Weird redirect when accessing from Google???

    Although the server was patched, I found a nasty bit of javascript hiding in one of the database tables... I've removed it so hopefully the issue is resolved. There is another update available so I'll try and apply that later on tonight.

    sam

  15. #15
    Deadly Vehicular Assassin Automotive Encyclopaedia Impurist's Avatar
    Join Date
    Jul 2010
    Location
    NSW
    Posts
    859

    Default Re: Weird redirect when accessing from Google???

    Pretty sure that URL123 site is trying to perform drive-by download attacks against the browser when you go there. :/ I've seen another car forum start redirecting in the last week or two too.

Similar Threads

  1. Toymods . net redirect dead?
    By Cuzzo in forum Forum Troubleshooting & feedback
    Replies: 7
    Last Post: 02-07-2011, 10:08 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •