Auto-re-routing

[Braden]

I'm using FireFox and IE8 to use these forums and I'm getting re-routed more and more (this is from two seperate PC's one with very high level security and the other with something more normal).

Scenario:

1) I’m reading the forms and BAM…auto re-routed to online Bingo.
2) More serious. Reading the forum and BAM get re-routed to a fake Control Panel image with warning stating the PC has virus’s

I haven’t clicked any pop-ups, indeed no pop-ups are showing or even showing as blocked. I can only assume the code for the forums has been compromised and tampered with. Happens on various threads and appears random.

Just thought you ought to know really and see if you can take action. The on-line bingo isn’t a major issue as you can just “back” and you’re where you started but the newer one…the fake Control Panel with fake virus warning is much more worrying for some users who are not PC savvy to know about it being fake and it disables your browser window as well.

Luckily as I use IE8 and Firefox, I normally have the forum open on a separate tab so can close it ok but this morning the 2nd one got me on the first session so I had to force FF to close via Task Manager.

[Pannonian]

What sites do they redirect you to?

[Braden]

I haven't taken the time to note down the URL's but as I said above the most common one is a simple on-line Bingo website (which seems genuine) but the other one doesn't have a URL as its quite a sophisticated website which looks EXACTLY like a Windows XP standard Control Panel complete with icons for hard drive etc etc.

Only difference is that it has a "mock" antivirus scan running on it and a large announcement stating your PC is infected...it also has several pop-up windows asking you to "ok" or "cancel" requests for antivirus updates.

It it was just my PC at home then I'd say I'd picked up that virus that copies XP's built in antivirus (can't recall the name of it) but its happened on a work PC which is seriously locked down with firewalls and antivirus active scans galore so it's website related I believe.

[Pannonian]

I've seen mock-AV sites before, and it's usually local drive-related, and often involve rather complicated cleaning processes, hence my asking for the sites. Without knowing what they are, it's hard to know what to do.

[Braden]

I know, which is why I was more concerned when it:

1) only happened when on these forums
2) happened on two seperate PC, from two seperate locations with two seperate security measure templates installed

I will attempt to get more info if possible next time it happens.

[Beskar]

I never had it happen with Firefox. But you could get Adblock Plus to make sure it doesn't for Firefox.

As for IE8, just don't bother using it.

[pevergreen]

2) More serious. Reading the forum and BAM get re-routed to a fake Control Panel image with warning stating the PC has virus’s

This has been happening lately

http://magnum-defence33.cn/1/?sess=p...0xMjY4MUAMPQJN

is the site

FF3. No adblock/noscript though, it doesnt install for me.

Only seems to happen from main page, currently scanning with AVG.