Jump to content


Photo

Another Virus On Site?


  • Please log in to reply
46 replies to this topic

#1 pad_ehh

pad_ehh

    Just grazing

  • Full Members
  • PipPip
  • 161 posts
  • Ireland
  • Golf VI Match BlueMotion TechTDI 2.0 140PS

Posted 23 March 2017 - 08:36 PM

Randomly browsing a thread and all of a sudden the page forwards itself to a page thats all red and some silly recorded voice comes on telling me I have a virus and that they will guide me through how to get rid of it etc. 

 

I closed the tab (eventually, it wouldn't let me at first) and carried on browsing as normal. It happened again, but it has only happened me on this forum, not on any other site.

 

Anyone else experiencing this?? I remember we had problems before with some porn or virus thing coming up after logging in last year.


Edited by pad_eee, 23 March 2017 - 08:37 PM.



#2 northpole

northpole

    More than a fleeting interest

  • Full Members
  • PipPipPipPipPip
  • 5603 posts
  • Suffolk
  • Golf IV TDI 1.9 AHF 110PS

Posted 24 March 2017 - 09:42 AM

It's not the site.... clean your system.... You must have some adware running on it

Sent from my SM-G935F using Tapatalk

#3 VSAdmin

VSAdmin

    Just grazing

  • Administrators
  • 138 posts
  • Mk4 Models

Posted 24 March 2017 - 01:53 PM

Clean your system as northpole suggested (MalwareBytes is hot in the streets these days) as well as clear your cache and cookies.

 

If you see it again can you grab a screenshot of the popup as well as the URL of it (If it has one)? I will be able to investigate and block it, if its a rogue popup.

 

Thanks

- JB



#4 Rubberduck1

Rubberduck1

    Just grazing

  • Full Members
  • PipPip
  • 788 posts
  • Exeter
  • Golf IV Match 1.6 16v BCB 105PS

Posted 24 March 2017 - 02:52 PM

You've must of visited a dodgy website in the past few days, download Malware Bytes and scan you system for Adware and routekits, once the first scans done it will run every day your PC is on, that would cure the stupid "Call Microsft Tech Support" rubbish popups


23uzi1z.jpg


#5 JackL15

JackL15

    Can normally be found on the A3.

  • Full Members
  • PipPipPipPip
  • 3317 posts
  • Surrey
  • Golf V GTI 2.0 200PS

Posted 24 March 2017 - 04:02 PM

First time on the site in a while and I had the same page pop up after a couple of minutes. This is a dedicated "work" laptop so hasn't been on anything too dodgy ;)



#6 Imagewerx

Imagewerx

    I'm not the 'droid you're looking for.

  • Moderators
  • 48957 posts
  • Crawley,West Sussexcestershire
  • Golf IV R32 3.2 240PS

Posted 24 March 2017 - 06:14 PM

Nothing on my home PC or Android phone,both on Chrome browser.Also nothing on either the desktop or mobile version on my phone,must be your browser.



#7 Gti Fly

Gti Fly

    More than a fleeting interest

  • Full Members
  • PipPipPipPipPip
  • 9479 posts
  • Golf IV R32 3.2 240PS

Posted 24 March 2017 - 06:20 PM

Happens to me when using Firefox Mozilla

Exactly the same thing. U click on a thread and instead of taking you to the thread you end up on some web page saying you need to pay to release your pc . The only way to get off the screen is to open task manager and end the browser manually .

Doesn't happen on any other device other than laptop which is mozilla

<a href="http://uk-mkivs.net/...d-0-60-569secs/">Click for pics of my car</a>
Shoulda got a 150 tdi - everyone knows they are best..

 


#8 northpole

northpole

    More than a fleeting interest

  • Full Members
  • PipPipPipPipPip
  • 5603 posts
  • Suffolk
  • Golf IV TDI 1.9 AHF 110PS

Posted 25 March 2017 - 02:28 PM

mozilla can be scripted to act in a certain way so it's the system that needs cleaning... I use firefox, mozilla, IE, cortana, safari and chrome on my lappie ( i also test websites when i have the time, both for response, design mistakes and seeing if pages are infected) this website is clean... so it must be your system that has something wrong.... and even work systems can be infected without the network admins detecting it especially if they only use one virusscanner.



#9 Gti Fly

Gti Fly

    More than a fleeting interest

  • Full Members
  • PipPipPipPipPip
  • 9479 posts
  • Golf IV R32 3.2 240PS

Posted 25 March 2017 - 02:32 PM

Ok thanks for that , are there any decent free cleaner programme u would recommend to solve that problem ?

<a href="http://uk-mkivs.net/...d-0-60-569secs/">Click for pics of my car</a>
Shoulda got a 150 tdi - everyone knows they are best..

 


#10 northpole

northpole

    More than a fleeting interest

  • Full Members
  • PipPipPipPipPip
  • 5603 posts
  • Suffolk
  • Golf IV TDI 1.9 AHF 110PS

Posted 25 March 2017 - 03:14 PM

Ok thanks for that , are there any decent free cleaner programme u would recommend to solve that problem ?

check this any one of these will do the job.... basically what i do is download 3 of them them and install one run it,  after cleaning uninstall and repeat the same process with the 2 others until the systems give an all clean... I also reinstall the virusscanner after that and reinstall it.... than run a boot scan... this way the virrusscanner can pick up any remains of any adware/virus that is still on the system....

 

and last but not least i install and run ccleaner and run that afterwards... i go into the uninstall tab and uninstall (clean out) everything that i didn't install or don't use... than i run a registry scan and clean out all the orphaned registry entries... than at the end i run a system clean that clears out the rest of the temporary files.

 

this process should guarantee you are virus and adware free.   



#11 pad_ehh

pad_ehh

    Just grazing

  • Full Members
  • PipPip
  • 161 posts
  • Ireland
  • Golf VI Match BlueMotion TechTDI 2.0 140PS

Posted 25 March 2017 - 04:10 PM

Glad it isn't just me. I only browse a few sites regularly and I don't use the laptop for any "other" purposes so I was pretty confident that the problem wasn't on my end. I use Chrome and have ad blocking software and already run a virus scan and Malwarebytes Premium scan which both came back 100% clean so was puzzled how this has happened. 


Edited by pad_eee, 25 March 2017 - 04:14 PM.


#12 northpole

northpole

    More than a fleeting interest

  • Full Members
  • PipPipPipPipPip
  • 5603 posts
  • Suffolk
  • Golf IV TDI 1.9 AHF 110PS

Posted 25 March 2017 - 05:04 PM

Glad it isn't just me. I only browse a few sites regularly and I don't use the laptop for any "other" purposes so I was pretty confident that the problem wasn't on my end. I use Chrome and have ad blocking software and already run a virus scan and Malwarebytes Premium scan which both came back 100% clean so was puzzled how this has happened. 

as you've noticed the adds on the website use the cookies from your system to give you personalised adds.... that means if you have a adware cookie that is what will be activated... this in no way is the server or the coding used on the forum.... this is what is in your system and gets triggered by the coding for the adds... now if that would be removed i'm quite sure the costs of keeping the forum running would go up so it is up to the user ( yeah that means us) to keep our system clean from cookies that are malware or adware.... 

a good cleaner for cookies is ccleaner like i stated before .... 

 

but adware/malware can be hidden in almost every installer, most of them come with free software or illegal software... also once adware is installed, your virus scanner/malware/ adware remover will not pick it up as it already passed your systems scan in the first place ...every virusscanner or malware/adware remover does a check when you install software.. if it isn't up to date the system just gives it an oke.... that's why it is so important to regularly scan for viruses/malware/adware and update their databases 

 

all that said if you have dodgy adds or re-directions  when opening pages on this forum, than your system is at fault... not the forum.

 

This is the reason why i said check your system, clean it out... reinstall your virus scanner, do a boot time scan, install ccleaner run most of the tasks and clean out all the cookies and other stuff you haven't installed or don't need.  As for malware/adware i wouldn't just use one engine i would use several as I clearly stated before..



#13 Lorcy

Lorcy

    Newbie

  • New Members
  • Pip
  • 42 posts
  • Golf IV TDI 1.9 AHF 110PS

Posted 08 April 2017 - 12:42 PM

I get the page redirection too, on both my home and work computers (which don't access anything dodgy). If it's my system at fault, why does it only happen on this site? I visit plenty of other forums and don't have a problem anywhere else.



#14 Dan FR

Dan FR

    Meth addict

  • Full Members
  • PipPipPipPip
  • 2782 posts
  • Caerdydd
  • Mk5 Models

Posted 08 April 2017 - 06:48 PM

Had this yesterday too. On a clean system/build too. Something up with the site guys

20160424_174354_1.jpg

TFSI... Revo Stage 2+ ...  :D PSN: PuntoGT031087. VCDS HEX + CAN, MPPS, VAG Commander & VAG tacho - South Wales

Logging, Coding, SKC retrieval & Immo work, MTE + Lit needles, Auto windows etc.. 1.9 TDI PD - Mapping & tweaking, LC, Popcorn etc


#15 northpole

northpole

    More than a fleeting interest

  • Full Members
  • PipPipPipPipPip
  • 5603 posts
  • Suffolk
  • Golf IV TDI 1.9 AHF 110PS

Posted 12 April 2017 - 06:23 AM

Had this yesterday too. On a clean system/build too. Something up with the site guys

Yes it occurs on my clean system now too so there must be something on the server that is slowly infecting the user database as it now happens on all my browsers and my safezone browser flags the page as infected... time to have the servers scanned (something the server host needs to do)... it probably is in the SQL database. 



#16 Imagewerx

Imagewerx

    I'm not the 'droid you're looking for.

  • Moderators
  • 48957 posts
  • Crawley,West Sussexcestershire
  • Golf IV R32 3.2 240PS

Posted 12 April 2017 - 06:51 AM

I still get nothing I'm not supposed to get on my PC,phone or tablet.Are there any particular pages it does it on,screenshots would be helpful?



#17 Gti Fly

Gti Fly

    More than a fleeting interest

  • Full Members
  • PipPipPipPipPip
  • 9479 posts
  • Golf IV R32 3.2 240PS

Posted 12 April 2017 - 08:00 AM

For me it happens only on the laptop, and the browser i use is Firefox Mozilla . Not sure if that's the reason. Doesn't happen on phone or tablet etc . Just laptop Mozilla browser.

And it's happens when you click to read a thread . Instead of opening up the thread you clicked on, it redirects you to a webpage saying you need to pay xyz as your system is infected with a virus .

It's basically some crappy version of a ransomware

<a href="http://uk-mkivs.net/...d-0-60-569secs/">Click for pics of my car</a>
Shoulda got a 150 tdi - everyone knows they are best..

 


#18 Dan FR

Dan FR

    Meth addict

  • Full Members
  • PipPipPipPip
  • 2782 posts
  • Caerdydd
  • Mk5 Models

Posted 12 April 2017 - 08:24 AM

Desktop only on Chrome for me - have multiple ad/pop-up blockers but they won't stop the redirect. Don't often use the desktop for forum browsing but will try and remember to grab a screenshot next time it happens


20160424_174354_1.jpg

TFSI... Revo Stage 2+ ...  :D PSN: PuntoGT031087. VCDS HEX + CAN, MPPS, VAG Commander & VAG tacho - South Wales

Logging, Coding, SKC retrieval & Immo work, MTE + Lit needles, Auto windows etc.. 1.9 TDI PD - Mapping & tweaking, LC, Popcorn etc


#19 adam-

adam-

    K04-064'd 1.8t

  • Full Members
  • PipPipPipPipPip
  • 5143 posts
  • Glasgow
  • Golf IV GTI 1.8T 20v AUM 150PS

Posted 12 April 2017 - 11:20 AM

Using Adblock on Chrome in work, home and phone.  No issues but Adblock is reporting blocks.


facebook.com/adamforbes92
ig: adamforbes92
Anthracite Grey 1.8t Build Thread.


#20 Gti Fly

Gti Fly

    More than a fleeting interest

  • Full Members
  • PipPipPipPipPip
  • 9479 posts
  • Golf IV R32 3.2 240PS

Posted 12 April 2017 - 08:24 PM

It just happened again on my laptop when I clicked on a thread.

 

 

The web address that comes up in the address bar is this:

 

http://0x1328404-vir...wMCAwNDggODg2Ng

 

 

not sure if that will do anything to help find out the problem is?     I just have to close the browser to get rid of the pop up, it's bloody annoying


<a href="http://uk-mkivs.net/...d-0-60-569secs/">Click for pics of my car</a>
Shoulda got a 150 tdi - everyone knows they are best..

 


#21 pad_ehh

pad_ehh

    Just grazing

  • Full Members
  • PipPip
  • 161 posts
  • Ireland
  • Golf VI Match BlueMotion TechTDI 2.0 140PS

Posted 18 April 2017 - 06:59 PM

all that said if you have dodgy adds or re-directions when opening pages on this forum, than your system is at fault... not the forum.

 

*cough*  :P  ;)

 

Anyway, at least it's now established that it isn't a problem on my end. (My laptop is regularly scanned and has never given me a notification of anything before. In fact, I recently re-installed W10 on it and it only visit a handful of large, reputable websites when in use.)

 

Hopefully it can be cleared out soon on the server end.  :)


Edited by pad_eee, 18 April 2017 - 07:01 PM.


#22 Imagewerx

Imagewerx

    I'm not the 'droid you're looking for.

  • Moderators
  • 48957 posts
  • Crawley,West Sussexcestershire
  • Golf IV R32 3.2 240PS

Posted 18 April 2017 - 09:29 PM

Sorry but I'm still not getting this on any of my devices.I have the old hard disc drive still installed and the new SSD and can boot from either of them,both with Windows 7 running on them (one 4 years old and the other a week or so old).I'm on here half a dozen times a day and I still haven't had one single redirect on phone or PC.This is on Chrome browser with ad-block enabled if that makes any difference.



#23 northpole

northpole

    More than a fleeting interest

  • Full Members
  • PipPipPipPipPip
  • 5603 posts
  • Suffolk
  • Golf IV TDI 1.9 AHF 110PS

Posted 19 April 2017 - 06:13 AM

*cough*  :P  ;)

 

Anyway, at least it's now established that it isn't a problem on my end. (My laptop is regularly scanned and has never given me a notification of anything before. In fact, I recently re-installed W10 on it and it only visit a handful of large, reputable websites when in use.)

 

Hopefully it can be cleared out soon on the server end.  :)

I only had it once it didn't happen again...and no dodgy websites or cookies on my system it doesn't show ads (they are all blocked) 



#24 Hungry Horace

Hungry Horace

    Padawan

  • Full Members
  • PipPipPip
  • 1261 posts
  • Golf IV GTTDI 1.9 ASZ 130PS

Posted 19 April 2017 - 06:42 AM

It'll probably happen again now, but I've had it a couple of times - again only ever on this site and no others - but not happened recently. 



#25 adam-

adam-

    K04-064'd 1.8t

  • Full Members
  • PipPipPipPipPip
  • 5143 posts
  • Glasgow
  • Golf IV GTI 1.8T 20v AUM 150PS

Posted 19 April 2017 - 06:49 AM

This is on Chrome browser with ad-block enabled if that makes any difference.

I'm on the same OS.  10 in work.  Both Chrome, both with ad-block.  It does report redirs though.  


facebook.com/adamforbes92
ig: adamforbes92
Anthracite Grey 1.8t Build Thread.


#26 Dan FR

Dan FR

    Meth addict

  • Full Members
  • PipPipPipPip
  • 2782 posts
  • Caerdydd
  • Mk5 Models

Posted 06 May 2017 - 01:31 PM

Bloody site is at it again.... This time when viewing Bobby's build thread, hadn't even clicked anything and it suddenly redirected me to the site below

bloody%20site.jpg


20160424_174354_1.jpg

TFSI... Revo Stage 2+ ...  :D PSN: PuntoGT031087. VCDS HEX + CAN, MPPS, VAG Commander & VAG tacho - South Wales

Logging, Coding, SKC retrieval & Immo work, MTE + Lit needles, Auto windows etc.. 1.9 TDI PD - Mapping & tweaking, LC, Popcorn etc


#27 egooverdrive

egooverdrive

    Newbie

  • New Members
  • Pip
  • 54 posts
  • Wales
  • Other Models

Posted 06 May 2017 - 03:26 PM

Yep, had the same come up for me earlier with audio saying my machine was infected.  I don't think I even went into any thread was just on the forum front page



#28 Imagewerx

Imagewerx

    I'm not the 'droid you're looking for.

  • Moderators
  • 48957 posts
  • Crawley,West Sussexcestershire
  • Golf IV R32 3.2 240PS

Posted 06 May 2017 - 03:42 PM

Still nothing for me,maybe you lot need to take stronger anti-biotics :P ! It's not that my anti-virus is blocking it so I don't see it,it will find and report anything malicious if it's there.



#29 Gti Fly

Gti Fly

    More than a fleeting interest

  • Full Members
  • PipPipPipPipPip
  • 9479 posts
  • Golf IV R32 3.2 240PS

Posted 06 May 2017 - 04:47 PM

I feel for you .

It's pointless to report it.

Nothing has been done about this problem since it was reported weeks and weeks ago

From a few comments saying it's in your computer , to it's your browser , to its in the server .

Fact is it's been reported for over a month , and nudda has been done.


Pointless to comment on this thread as nothing will get done.

<a href="http://uk-mkivs.net/...d-0-60-569secs/">Click for pics of my car</a>
Shoulda got a 150 tdi - everyone knows they are best..

 


#30 Imagewerx

Imagewerx

    I'm not the 'droid you're looking for.

  • Moderators
  • 48957 posts
  • Crawley,West Sussexcestershire
  • Golf IV R32 3.2 240PS

Posted 07 May 2017 - 10:45 AM

We need to know as much information as possible about this please everyone,probably the most important will be what browser you're all using.I don't know about other browsers as I always use Chrome,and with Chrome it stores some stuff unique to you for when you log on from other devices etc.I use Chrome on all my devices (PC,phone and tablet) and this is not a problem for me on any of them and I only use the cheapest possible free anti-virus software (Avira) on my PC.
Maybe look at torrent and gaming websites/networks as the source for this,I never use them and never ever get anything malicious flagged up by my virus software.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users