Possible redirect exploit. Please keep an eye out in case I didn't manage to fix it.

[Cpt. Lundgren]

We had some problems where the visitor got redirected to another site. I have replaced all of the php-files for the forums, checked the templates for anything suspicious, and some other controls to get rid of it. Before that, I managed to get my anti-virus to warn for a redirect malware twice, and none after even after several tries from two different computers. Still, as the redirect wasn't triggered each time, it can mean I was just lucky/unlucky and it is still there.

While I will keep hammering some tests to improve the odds to detect it if is still there, please send me a PM or post in this thread if anyone of you finds it or hear about it from someone else. So far, it has been triggered by following a normal link here. While my anti-virus didn't tell me where it was attempting to redirect, the redirection reported to me was to a download at myfilestore.com.

Thank you The Tatterdemalion King for pointing the malware attack out.

[Owen E Oulton]

Bastards need to be crucified by their testicles...

[Chris Donovan]

For whatever it's worth, it's not just you. I've had this happen 3-4 times in the last 10 days or so. Where are you being redirected to?

I'm being sent to a "your computer is infected" type site.

[Cpt. Lundgren]

Bastards need to be crucified by their testicles...

Can't argue with that.

For whatever it's worth, it's not just you. I've had this happen 3-4 times in the last 10 days or so. Where are you being redirected to?

I'm being sent to a "your computer is infected" type site.

I didn't knew about it until TTK pointed it out to me, but I managed to trigger it twice before I got home and could take down the site for a while.

I don't know where it tried to send me, as my anti-virus/anti-malware caught it. Not sure how filestore.com link presented itself, but it sound as if it has been directing to different locations.

Main question is, did I manage to get rid of it or is the problem still around? So far, I haven't managed to trigger it again myself.

[Chris Donovan]

I couldn't say. I never triggered it here at all, but then again I'm not a regular "dweller" here.

[The Tatterdemalion King]

I haven't been able to replicate it.