Browser redirecting (I think)

[simpo two]

When I type www.tvgohome.com I get http://www.spamstomp.com/index.php? instead. I've had the odd tits and bums/poker thing as well, but only on some URLs.

I have Hijack This and fully updated versions of Microsoft Giant, AdAwareSE Personal, XoftSpy and AVG Grisoft but can't find/kill it. Any suggestions?

[slinky]

Don't worry Simpo, I get the same thing when I go to that address...

slinky

[simpo two]

Aha, thanks.

How about www.thelurch.com ? It's a Jaguar forum but I always get various other things; this time it's http://casinowan.com/search.php?q=casino%20online

[slinky]

Yup, I can get to that one without problem..

Do you always get re-directed or is it just an intermittant thing?

slinky

[simpo two]

slinky said:

Do you always get re-directed or is it just an intermittant thing?

It's always on that URL (and pages from it), and similar junk sites ending in 'php?' appear on certain other 'innocent' URLs, but most are fine. I don't know what triggers it off.

[slinky]

Try jumping around my site for a while, it's all php based, see if there's any triggers..

(some interesting reading on there as well )

slinky

[simpo two]

Good, looks fine, no tits or bums to be seen.

What is php anyway and what's it for/do?

Ona lighter note, how about a caption for your pic? 'We take the car on the right - and beat it with hammers until it looks like the one on the left...'

[slinky]

to quote google "PHP is a server-side, cross-platform, HTML embedded scripting language that lets you create dynamic web pages. PHP-enabled web pages are treated just like regular HTML pages and you can create and edit them the same way you normally create regular HTML pages."

I'm using a product called Mambo to manage and create the site, makes life REALLY easy!!!

Like the caption...

Have a cruise through the gallery and see if you can find any others you thing would be suitable!

slinky

[simpo two]

slinky said:

to quote google "PHP is a server-side, cross-platform, HTML embedded scripting language that lets you create dynamic web pages. PHP-enabled web pages are treated just like regular HTML pages and you can create and edit them the same way you normally create regular HTML pages."

Is 'dynamic' a meaningful word in this context or just marketese? Apart from that, it seems to be boasting that it's the same as html. 'Hey, buy our product, it's the same as the one you already know and use!'

(I'm in my 'buyers' mode )

[slinky]

Erm, not being much of a web developer (i cheated and used content management for my site) I couldn't really extole it's virtues, however, I understand that it's easier to make a "dynamic" site with PHP than it is with straight HTML...

Either way, mambo is bloody easy to use, and if someone like me can build a website like that SO easily, I'm all for it...

slinky
587racing.com <-- blatant plug!

[simpo two]

slinky said:

Either way, mambo is bloody easy to use, and if someone like me can build a website like that SO easily, I'm all for it...

Never 'eard of it. I'm a FrontPage muppett.

(Still don't know what dynamic means!)

Any thoughts on the browser hijack folks?

[slinky]

I found frontpage harder to use (and get the results I wanted) than mambo...

www.mamboserver.com/

Have a look, as long as your webhost supports PHP and MYSQL you can use it...

slinky

[_dobbo_]

More to the point...

simpo two said:

When I type www.tvgohome.com

One of the funniest things there has ever been. Ever. Don't recall ever having laughed as much as at that site, what a shame he stopped doing it and now just rants in a column for the Gaurdian instead.

[simpo two]

Any ideas what's causing the problem chaps?

[Trooper2]

simpo two said:

Any ideas what's causing the problem chaps?

I had the same thing happening when I visited certain sites and tried every anti- virus and anti- spyware I could find and couldn't get rid of it. Fought it for a month, finally gave up and did a destructive recovery on my P.C.

Now I'm running spywareblaster along with microsoft anti-spy, ad-aware, & spy-bot. I've revisited the sites where I think I may have picked up what ever it was and it hasn't returned..... so far.


You could try posting a "Highjackthis" log to this forum:

http://forums.spywareinfo.com/


Wish I could be more help, your decription of the re-direct is perfect!

[_dobbo_]

simpo two said:

Any ideas what's causing the problem chaps?

Check your hosts file;

WINDOWSFOLDERsystem32driversetchosts

open it in notepad and see if it has any odd entries in there. If not, then all the usual checks for spyware etc would be all I could advise, sorry!

[simpo two]

_dobbo_ said:

Check your hosts file; WINDOWSFOLDERsystem32driversetchosts open it in notepad and see if it has any odd entries in there. If not, then all the usual checks for spyware etc would be all I could advise, sorry!

Thanks dobbo, all I see is:

file said:

# Copyright (c) 1993-1999 Microsoft Corp. # # This is a sample HOSTS file used by Microsoft TCP/IP for Windows. # # This file contains the mappings of IP addresses to host names. Each # entry should be kept on an individual line. The IP address should # be placed in the first column followed by the corresponding host name. # The IP address and the host name should be separated by at least one # space. # # Additionally, comments (such as these) may be inserted on individual # lines or following the machine name denoted by a '#' symbol. # # For example: # # 102.54.94.97 rhino.acme.com # source server # 38.25.63.10 x.acme.com # x client host 127.0.0.1 localhost 1089288654 auto.search.msn.com

I'm hoping we can fix this here as I don't want to get involved with another forum!

[_dobbo_]

simpo two said:

I'm hoping we can fix this here as I don't want to get involved with another forum!

Ok well it doesn't look like it's your hosts file. I assume you are using Internet Explorer? What happens if you install Firefox and go to the same site? Same issue or not?

If the same, it's a DNS thing - something is hijacking the DNS result and sending you to the wrong place.

If different, then it's an IE thing - something is screwing with IE (quel surprise).

If you can't be bothered with Firefox (although I would recmommend it) you can do the same test by doing the following.

Hold down the "Windows" key and press "R".

Now type "cmd" in the run prompt.

In the resulting command prompt, type "nslookup".

Now, type "www.thelurch.com" then hit enter. What you get back should say:


Non-authoritative answer:
Name: www.thelurch.com
Address: 82.165.54.109


If it does, your DNS is fine - and something else is causing this. If it doesn't it's a bad DNS result that's sending you to the wrong place.

Ultimately this doesn't necessarily help you to solve it, but does narrow down where the problem lies. Making the big assumption that you are using IE, my best advice would be to get firefox and be done with it!

[simpo two]

Thanks very much dobbo.

Arse, can't copy and paste from the DOS window.


I get

window said:

> www.thelurch.com Server: ip76-37.netcathost.com Address: 195.225.176.37 Name: www.thelurch.com Address: 82.165.54.109 >

Any help?

[sybaseian]

Non-authoritative answer:
Name: www.thelurch.com
Address: 82.165.54.109

I get the same results.