Why is gwguru misdirecting me?

lordheinous

lordheinous

Krytan Explorer

Join Date: Aug 2007

Hey, I'm just wondering if this is happening to anyone else, and, if not, why its only happening to me. Every time I click on my link to gwguru in my bookmarks, I get a page saying "You are being redirected to XXXXXXX" (don't want to give the site free advertising, I can post the site name if necessary), and then I get redirected to said site. I even googled guru to see if it was somehow a problem with my link, but the same thing happened. I finally was able to get here by using a direct link to a post I had then just navigating the site normally. I also checked for spyware, and found nothing. This happens to none of my other sites. If you know what the problem is, please tell me.

gone

Guest

Join Date: Jan 2007

sounds like your browser got snatched.

PM the site admin. they are pretty sure that no one can get a virus or anything from here because this is the biggest site.

/edit
http://www.guildwarsguru.com/forum/s...php?t=10284431

lordheinous

lordheinous

Krytan Explorer

Join Date: Aug 2007

Quote:
Originally Posted by flubber
sounds like your browser got snatched.

PM the site admin. they are pretty sure that no one can get a virus or anything from here because this is the biggest site.

/edit
http://www.guildwarsguru.com/forum/s...php?t=10284431
Several things:
First off, what do you mean by "snatched"? As I stated, this occurs ONLY when I attempt to link to the Guildwars Guru main page, so I don't see what that has to do with my browser.

Second off, I don't get what you're trying to say about gwguru and viruses; I've run both spyware scans and virus scans, and have come up clean, so I'm not even sure what you're getting at.

Finally, I read through the whole link you posted, only to find it was page after page on guildwars accounts getting hacked. My guildwars account is fine (at least it was a couple hours ago lol), so I have no idea why you posted that either.

Snograt

Snograt

rattus rattus

Join Date: Jan 2006

London, UK GMT??0 ??1hr DST

[GURU]GW [wiki]GW2

R/

Never heard of this happening before - certainly sounds suspiciously like browser hijack.

It may be spyware that your scanner is not detecting. I access Guru from several different computers, all via Favorites/Bookmarks, and I've never had a re-direct.

Tachyon

Tachyon

Forge Runner

Join Date: Nov 2005

Stoke, England

The Godless [GOD]

W/

Download and run, if you haven't done so already, Spybot S&D, AdAware and Vundofix.

BlueNovember

BlueNovember

Wilds Pathfinder

Join Date: Sep 2005

WTS GW2 items for Zkey

Mo/

Quote:
Originally Posted by lordheinous
Every time I click on my link to gwguru in my bookmarks, I get a page saying "You are being redirected to XXXXXXX
Does this behaviour occur if you just type in guildwarsguru.com?

Have you tried looking at that bookmark's url? Perhaps it was changed. (As a prank or by a malicious application).

I would add "Hijackthis" to the list provided by Azagoth.

Stockholm

Stockholm

Desert Nomad

Join Date: Feb 2006

Censored

Censored

R/

Quote:
Originally Posted by flubber
sounds like your browser got snatched.

PM the site admin. they are pretty sure that no one can get a virus or anything from here because this is the biggest site.

/edit
http://www.guildwarsguru.com/forum/s...php?t=10284431

Read this before posting statments like that

http://www.guildwarsguru.com/forum/s...php?t=10283360

Inde

Site Contributor

Join Date: Dec 2004

Stockholm, first off... flubber was being sarcastic.

2nd off, flubber no such thing was said. In fact we not only acknowledged but had it fixed within 24 hours. Some of the other problems people are posting in that thread are not tied to guru from what we can see. Also, the only person reporting such a malicious virus readily admits to having no anti-virus, not doing any updates and basically no security whatsoever so I take their "explanation" of what the virus may be doing and where it came from as absurdly false taking into account the conversations I had with some users who did know what was on their PC before it happened. It only affected IE users as well, not firefox users and if you had some basic anti-virus in place it caught it. Without it using a virus scan cleared it up.

I have thoroughly looked into the virus' and know what they do. Hijacking a browser could potentially be linked except that the OP himself stated nothing came up in his virus scanner.

Have you tried re-bookmarking the site? Please let me know if it continues after that and what browser you are using lordheinous.

lordheinous

lordheinous

Krytan Explorer

Join Date: Aug 2007

Quote:
Originally Posted by Inde
Stockholm, first off... flubber was being sarcastic.

2nd off, flubber no such thing was said. In fact we not only acknowledged but had it fixed within 24 hours. Some of the other problems people are posting in that thread are not tied to guru from what we can see. Also, the only person reporting such a malicious virus readily admits to having no anti-virus, not doing any updates and basically no security whatsoever so I take their "explanation" of what the virus may be doing and where it came from as absurdly false taking into account the conversations I had with some users who did know what was on their PC before it happened. It only affected IE users as well, not firefox users and if you had some basic anti-virus in place it caught it. Without it using a virus scan cleared it up.

I have thoroughly looked into the virus' and know what they do. Hijacking a browser could potentially be linked except that the OP himself stated nothing came up in his virus scanner.

Have you tried re-bookmarking the site? Please let me know if it continues after that and what browser you are using lordheinous.
I am using firefox.

Also, I tried to re-bookmark it by going to the main page and adding it to my bookmarks, and it does get me successfully to this site. The old bookmark however still redirects, as does typing in www.guildwarsguru.com, which is what the old bookmark is linked to. However, the new bookmark is linked to www.guildwarsguru.com/index.php, which, when typed in, takes me successfully to this site.

In short:
Typing in, using a bookmark, or even using a google link to www.guildwarsguru.com redirects me, but typing in or using a bookmark to www.guildwarsguru.com/index.php successfully gets me here.

kvndoom

kvndoom

Forge Runner

Join Date: Jul 2005

Communistwealth of Virginia

Uninstalled

W/Mo

Check your HOSTS file? I dunno...

Hengis

Hengis

Wilds Pathfinder

Join Date: Apr 2006

London

Better Than Life (BTL)

R/

I agree with the post above.. Sounds very much like your Hosts file has been compromised.

Have a look at:

\windows\system32\drivers\etc\hosts

Open it with Notepad.

See if there are any rogue entries there.