Comments on: redstate.com redirect? Antivirus 2009?

By: janis

janis — Mon, 05 Jan 2009 13:58:34 +0000

It’s gotoyourclicks.cn 78.46.101.234,80

By: janis

janis — Mon, 05 Jan 2009 13:09:48 +0000

message with “gotoyourclicks.com” as the redirect.

By: LJ "Beaglescout" Miller

LJ "Beaglescout" Miller — Mon, 05 Jan 2009 12:36:35 +0000

where it tried to install an “antivirus” program.

By: itrytobenice

itrytobenice — Mon, 05 Jan 2009 02:11:29 +0000

Looked like it was scanning, and I got it shut down (can’t remember how) but it didn’t get alerted by my anti-virus software.

I don’t know if that means I got it shut down in time or if my software is weak.

By: Finrod

Finrod — Sun, 04 Jan 2009 20:01:37 +0000

By: Lammo

Lammo — Sun, 04 Jan 2009 07:14:37 +0000

If I recall correctly it was when I clicked the link to log in.

By: JLenardDetroit

JLenardDetroit — Sun, 04 Jan 2009 02:25:42 +0000

clickonadvertising.cn cookie attempted to hit (immediately followed by the phony scanner site cookie) while redirecting me…. couldn’t see what ads were present, transitioned too fast and I just had time to block the cookies and nuke the window….

By: Jaded

Jaded — Sun, 04 Jan 2009 02:20:41 +0000

so it was not associated with any of your ads….good luck in finding the pesky little devil and doing away with it. Twitter as well has Direct Messages coming that say look at this blog about you that is screwing around with people’s computers as well!

I am fortunate in having a top tier network guy who has my computer protected to the hilt because its attached to our server here and as such must be like Ft Knox

By: cookcountyconservative

cookcountyconservative — Sun, 04 Jan 2009 01:58:23 +0000

I listened to that idiot for about 5 minutes last night. I don’t think he could tell the difference between a spoon and a ladle, much less pull off something like that.

By: Kenny Solomon

Kenny Solomon — Sun, 04 Jan 2009 01:26:20 +0000

I haven’t had a problem here.

Jihadwatch, Ynet News and by some accounts over 1,000 sites have been hit so far.

When IsraelPundit got hit, they traced the image of the Palestinian flag that was uploaded and found it went to a WordPress blog.

Whatever may have happened here could have been part of that series of attacks.

By: RJD

RJD — Sun, 04 Jan 2009 01:04:04 +0000

Only that one time, so far. Windows Vista, Firefox 3.0.5.

Opened the page and was redirected along with a pop up ad. Didn’t have time to see anything else on the page.

By: LJ "Beaglescout" Miller

LJ "Beaglescout" Miller — Sat, 03 Jan 2009 21:35:23 +0000

and it blocked Redstate until I cleared it up. So I never got to see the site.

By: Josh Painter

Josh Painter — Sat, 03 Jan 2009 21:18:16 +0000

Read all about it:

http://www.hardforum.com/showthread.php?t=1378708

By: GregInFla

GregInFla — Sat, 03 Jan 2009 20:49:59 +0000

So I just laughed it off. But it made all firefox windows really small, and opened in a new window, with no firefox menus displayed. I just quite firefox and restarted. I did not know it was from redstate.com at the time, because my home page is actually three firefox tabs: dealmac.com, redstate.com, and jihadwatch.org. I guess redstate.com was the culprit.

By: George Claghorn

George Claghorn — Sat, 03 Jan 2009 20:42:12 +0000

Malicious code inside one the ads. Do NOT buy anything from that site that you get redirected to.

By: aesthete

aesthete — Sat, 03 Jan 2009 19:47:07 +0000

Hopefully, it will be disabled, or whatever you guys have to do to stop it from popping up, soon.

By: Jaded

Jaded — Sat, 03 Jan 2009 19:35:10 +0000

same thing with the “pretend” scanning…..si whats up?

By: davo119

davo119 — Sat, 03 Jan 2009 19:34:46 +0000

I was stuck for several days with continuous page redirection. I was given a copy of Norton Internet Secutity 2009 and a couple of days later it was gone.
Is this it:
http://www.symantec.com/security_response/writeup.jsp?docid=2008-082521-2037-99&tabid=2

By: Vladimir

Vladimir — Sat, 03 Jan 2009 19:34:19 +0000

If the window pops open for you, any click – including a click on the normal “close window” box – runs the virus program.

Yes, it cleverly mimics popular anti-virus software, and at one point will even mimic “the blue screen of death”.

And, for the record, my browser is Firefox, and I’ve recently seen the redirect on both my Mac desktop & my Windows Vista laptop. Both times associated with RedState. I safely shut it down (I think) by closing the active browser window.

By: civil_truth

civil_truth — Sat, 03 Jan 2009 18:58:55 +0000

It happened when RedState was starting to load – and may have happened in conjunction with an inadvertent random mouse click. The program appeared to be scanning my hard drive (or was pretending to), and the program did not close in the usual manner when I attempted to close the window. Can’t remember if closing IE worked or if I had to use a bigger hammer.