|
Welcome to the Australian Ford Forums forum. You are currently viewing our boards as a guest which gives you limited access to view most discussions and inserts advertising. By joining our free community you will have access to post topics, communicate privately with other members, respond to polls, upload content and access many other special features without post based advertising banners. Registration is simple and absolutely free so please, join our community today! If you have any problems with the registration process or your account login, please contact us. Please Note: All new registrations go through a manual approval queue to keep spammers out. This is checked twice each day so there will be a delay before your registration is activated. |
|
Site Support If something isn't working or you have a suggestion ( a nice one !! ) let us know here. |
|
Thread Tools | Display Modes |
12-12-2016, 10:33 AM | #1 | ||
Powered by Marshall
Join Date: Jan 2005
Posts: 1,143
|
Hi guys
When I click Ford Forums from google every second time produces a redirection to fileshack? Is this a site sponsorship initiative or has something gone wrong?
__________________
Powered by Marshall |
||
12-12-2016, 11:56 AM | #2 | ||
Long time lurking
Join Date: May 2007
Location: murtoa
Posts: 175
|
I am getting this result from google as well
__________________
BA Falcon XR8 Devil R - UA Everest Sport - Next Gen Ranger XLT v6 - BA Fairlane G220 |
||
12-12-2016, 11:59 AM | #3 | |||
Donating Member
Join Date: Jan 2005
Location: Morayfield
Posts: 28,141
|
Quote:
I assume when you enter fordforums.com.au directly into the address bar it is ok?
__________________
I love Holdens.... |
|||
12-12-2016, 12:11 PM | #4 | ||
FF.Com.Au Hardcore
Join Date: Aug 2016
Posts: 895
|
HMMM, maybe they're not all false positives.
|
||
12-12-2016, 12:18 PM | #5 | ||
Donating Member
Join Date: Jan 2005
Location: Morayfield
Posts: 28,141
|
What is the rest of the url for that threat. Looks like the misc.php handles smilies amongst other things
__________________
I love Holdens.... |
||
12-12-2016, 01:37 PM | #6 | ||
FF.Com.Au Hardcore
Join Date: Aug 2016
Posts: 895
|
|
||
12-12-2016, 03:19 PM | #7 | ||
Powered by Marshall
Join Date: Jan 2005
Posts: 1,143
|
It actually displays a missing plug in warning then has a link to a download. Next time it pops up I'll post the url
__________________
Powered by Marshall |
||
12-12-2016, 10:36 PM | #8 | ||
FF.Com.Au Hardcore
Join Date: Jul 2005
Posts: 569
|
Run Adwcleaner and junk removal tool
both from malwarebytes also worth running malwarebytes (mbam)- I was getting the ocassional filestore72.infor redirection being blocked by malwarebytes |
||
This user likes this post: |
13-12-2016, 10:08 AM | #9 | ||
Powered by Marshall
Join Date: Jan 2005
Posts: 1,143
|
__________________
Powered by Marshall |
||
13-12-2016, 10:19 AM | #10 | |||
Donating Member
Join Date: Jan 2005
Location: Morayfield
Posts: 28,141
|
Quote:
I would be running a virus scan on your machine
__________________
I love Holdens.... |
|||
13-12-2016, 11:03 AM | #11 | ||
Starter Motor
Join Date: May 2016
Location: Victoria
Posts: 11
|
|
||
13-12-2016, 11:18 AM | #12 | ||
Powered by Marshall
Join Date: Jan 2005
Posts: 1,143
|
Its from Google search
I run AV and have just run AsCleaner and I still get the same thing every second or third attempt
__________________
Powered by Marshall |
||
13-12-2016, 11:40 AM | #13 | |||
Donating Member
Join Date: Jan 2005
Location: Morayfield
Posts: 28,141
|
Quote:
ie What is the URL for the search result
__________________
I love Holdens.... |
|||
13-12-2016, 11:57 AM | #14 | ||
Powered by Marshall
Join Date: Jan 2005
Posts: 1,143
|
__________________
Powered by Marshall |
||
13-12-2016, 01:24 PM | #15 | |||
Donating Member
Join Date: Jan 2005
Location: Morayfield
Posts: 28,141
|
Quote:
__________________
I love Holdens.... |
|||
13-12-2016, 06:30 PM | #16 | ||
Starter Motor
Join Date: May 2016
Location: Victoria
Posts: 11
|
Got redirected again clicking a FordForums link via a Google search for brake pads and FordForums. Redirected to filestore72.info, IP: 66.199.231.59.
Closing the window and clicking the FordForums link again opens correctly. |
||
14-12-2016, 09:32 AM | #17 | ||
Powered by Marshall
Join Date: Jan 2005
Posts: 1,143
|
Any admins care to investigate?
It claims that it is trying to install a missing plug in but I'm super sceptical
__________________
Powered by Marshall |
||
14-12-2016, 11:58 AM | #18 | ||
Donating Member
Join Date: Jan 2005
Location: Morayfield
Posts: 28,141
|
Don't install any plugins. Can you screen shot the message you get?
__________________
I love Holdens.... |
||
14-12-2016, 05:45 PM | #19 | ||
FF.Com.Au Hardcore
Join Date: Jul 2005
Posts: 569
|
Did you run both Adwclean AND junkware removal tool (without anti virus turned on?)
What did it find? did you clean/remove the items it found or just close it down? |
||
14-12-2016, 06:42 PM | #20 | ||
FF.Com.Au Hardcore
Join Date: Apr 2005
Location: Canberra
Posts: 13,448
|
There are heaps of websites that have this problem which relates to code inserted that redirects based on HTTP_REFERRER header. It doesn't happen in Bing or Yahoo for me so seems like it is only doing it on Google results.
In the network traffic the initiator to filestore72 is www.fordforums.com.au/misc.php?v=387&js=js:1 So I'd start with looking at that file for code looking at the referrer headers. Something admins will have to do though. |
||