Jump to content


Photo

Getting Hijacked!


  • Please log in to reply
9 replies to this topic

#1 Joe Romas

Joe Romas
  • Casita Club Member
  • 320 posts
  • Local time: 11:58 AM
  • Location:Columbus, Ohio
  • Casita Model/Size:1999 17' SD
  • Interests:Hobbies are machining, doing "mods" to my Casita, camping and keeping busy.
  • Gender:Male

Posted 12 September 2016 - 04:53 AM

Lately as I switch between pages on Casitaclub I've been getting ads and or alerts some telling me my computer is infected and to call this number.

 

I thought it was a Waterfox problem and have removed WF and loaded Chrome.

Chrome is actually worse then WF. 

I've run various spyware programs and that didn't help.

I'm running a PC with win 10 and no other site I visit does this.

 

Any idea what may be happening?

Anyone else having problems?

 

Joe


Joe and Mary Romas
Columbus, OH
1999 Casita 17' SD
2017 GMC Seirra


#2 NASA42 B

NASA42 B
  • Casita Club Member
  • 505 posts
  • Local time: 02:58 PM
  • Location:Camp Hill, PA
  • Casita Model/Size:Liberty 17 Deluxe
  • Interests:Family, Reading, RVing, History, some community service, and my rescue cat named "Alley" at home...
  • Gender:Male
  • Trailer Name:NASA42 - B

Posted 12 September 2016 - 05:01 AM

Joe...

 

I also am running Windows 10, and am using their Edge browser.  No sign of your particular problems yet.  It could have been an infection from another site you've visited with a timing delay installed with it.  I've had that happen before.

 

Frank  :unsure: 



#3 nealreust

nealreust
  • Casita Club Member
  • 151 posts
  • Local time: 12:58 PM
  • Location:LAS CRUCES, NM
  • Casita Model/Size:08FD17
  • Gender:Male
  • Trailer Name:Bert

Posted 12 September 2016 - 05:22 AM

I use Chrome and have not seen this problem, however I do have "AdBlocker" installed.  It's a free/donations accepted application.

Neal

Using Win-7, resisting Win-10.


Edited by nealreust, 12 September 2016 - 05:23 AM.

  • K&C likes this
Neal & Kaye Reust
Las Cruces, NM
2008 17 FD "Bert" (Eggbert)
2009 Nissan Titan

#4 Joe Romas

Joe Romas
  • Topic Starter
  • Casita Club Member
  • 320 posts
  • Local time: 11:58 AM
  • Location:Columbus, Ohio
  • Casita Model/Size:1999 17' SD
  • Interests:Hobbies are machining, doing "mods" to my Casita, camping and keeping busy.
  • Gender:Male

Posted 12 September 2016 - 05:38 AM

Thanks for the replies.

I've done some more testing checking/cleaning  with "Super AntiSpyware between tests.

 

Going into and out of Chrome, zero threats.

Chrome> Casita club main menu  then exit chrome, 16 Threats.

Chrome>CC> > read a couple of posts 431 threats. that's when I get the adds and other junk.

Chorme and Casita Forum, zero threats.

 

I'll download 
"AdBlocker"

 

I tried Edge but don't like the "how can I help" look and feel.

 

thanks.

 

Joe


Joe and Mary Romas
Columbus, OH
1999 Casita 17' SD
2017 GMC Seirra


#5 thetravelkids

thetravelkids
  • Casita Club Member
  • 328 posts
  • Local time: 01:58 PM
  • Location:Diamondhead, MS
  • Gender:Couple
  • Casita Club Directory #:2583

Posted 12 September 2016 - 05:52 AM

Joe,

Had a kind of wonky e-mail this morning....someone sent to me, 4 or 5 others, and The Casita Club. Was supposed to open in a browser.

Deleted it without opening it.

Don't know if anyone else in the Casita Club received this e-mail or what it was about, but if you don't indicate in the e-mail what it is about or I don't have any idea who you are, I delete it.


Edited by thetravelkids, 12 September 2016 - 05:52 AM.

  • Carol Christensen and Jerrybob like this
Bob & Pat
2012 Evergreen Element ET26SLR - "Ms Ellie"
2007 Casita 17' SD, gone but not forgotten
2018 Ford Expedition XLT
Visit us at www.katrinacasita.wordpress.com

#6 Joe Romas

Joe Romas
  • Topic Starter
  • Casita Club Member
  • 320 posts
  • Local time: 11:58 AM
  • Location:Columbus, Ohio
  • Casita Model/Size:1999 17' SD
  • Interests:Hobbies are machining, doing "mods" to my Casita, camping and keeping busy.
  • Gender:Male

Posted 12 September 2016 - 06:15 AM

Progress update!

I downloaded  and installed "ADBLOCK", couldn't find "adblocker", turned super anti spyware monitoring on and surfed for 10 minutes on Casita Club then checked using super antispyware and only found 8 threats, a long way from 431 for a similar session earlier. And there was no popups or the like. Just for an FYI I'm attaching the threat log. I'll check the threats later.

 
Thanks again for your help.
Joe
 
SUPERAntiSpyware Scan Log
 
Generated 09/12/2016 at 10:04 AM
 
Application Version : 6.0.1224
Database Version : 13013
 
Scan type       : Quick Scan
Total Scan Time : 00:00:33
 
Operating System Information
Windows 10 Home 64-bit (Build 10.00.10586)
UAC On - Administrator
 
Memory items scanned      : 771
Memory threats detected   : 0
Registry items scanned    : 58109
Registry threats detected : 0
File items scanned        : 8454
File threats detected     : 8
 
Adware.Tracking Cookie
.addthis.com\dt [ C:\USERS\JOSEPH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.addthis.com\bt2 [ C:\USERS\JOSEPH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.addthis.com\di2 [ C:\USERS\JOSEPH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.addthis.com\uid [ C:\USERS\JOSEPH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.addthis.com\vc [ C:\USERS\JOSEPH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.addthis.com\uvc [ C:\USERS\JOSEPH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.addthis.com\loc [ C:\USERS\JOSEPH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.viglink.com\vglnk.Agent.p [ C:\USERS\JOSEPH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
 
============
 End of Log 
============

Joe and Mary Romas
Columbus, OH
1999 Casita 17' SD
2017 GMC Seirra


#7 Wally Z

Wally Z
  • Casita Club Member
  • 1,303 posts
  • Local time: 10:58 AM
  • Location:Alaska
  • Casita Model/Size:17ft. Spirit Exlax
  • Interests:Pole Dancers
  • Gender:Not Telling
  • Trailer Name:Casablanca
  • Casita Club Directory #:69

Posted 12 September 2016 - 12:46 PM

Clear cache and cookies maybe?  I use Norton for all protection and haven't had any issues since. That was many years ago.


  • sandyb12 likes this

2014 17' Casita SD


#8 MGD

MGD
  • Casita Club Member
  • 236 posts
  • Local time: 11:58 AM
  • Location:Manila, UT
  • Casita Model/Size:17' FD
  • Interests:Eclectic.
  • Gender:Couple
  • Trailer Name:Casitaminophen

Posted 15 September 2016 - 08:12 PM

Joe,

 

I don't know what anti-virus or anti-malware software you may be using, but for most users, I recommend that you just allow Microsoft to install and update the Malicious Software Removal Tool (MRT) also called Windows Defender with some versions. There is no cost and it is effective. It will scan for viruses and malware, and quarantine or remove both. The price is reasonable (free). It may be already installed, just need to be enabled or activated.

 

https://www.microsof...ol-details.aspx



#9 Eric Mayer

Eric Mayer
  • Admin
  • 4,025 posts
  • Local time: 11:58 AM
  • Location:Idaho
  • Gender:Male
  • Casita Club Directory #:1000

Posted 02 October 2016 - 07:20 AM

If you are getting redirected, the strongest possibility is that your computer may be infected.  We use the Sucuri plug-in to monitor the site, which will alert us if there is any kind of malicious activity ( https://sitecheck.sucuri.net// )

 

I recommend you run some anti-virus scans to check that your computer is not infected.  Also, some of the "threats" the browser anti-virus programs alert to, are just standard cookies that many sites install.  It doesn't hurt to block them, but it's normally not malicious.

 

Sorry for the delay in getting back with you, I've been running around the Northwest the past month!

 

Eric  B)


The Casita Club

----------

Here is a video tutorial on how to upload images to your post:
How To Attach an Image to Your Post


#10 Wally Z

Wally Z
  • Casita Club Member
  • 1,303 posts
  • Local time: 10:58 AM
  • Location:Alaska
  • Casita Model/Size:17ft. Spirit Exlax
  • Interests:Pole Dancers
  • Gender:Not Telling
  • Trailer Name:Casablanca
  • Casita Club Directory #:69

Posted 02 October 2016 - 08:25 AM

No anti-virus software is any good unless you keep them updated. The ones that I've seen that say they are free (usually limited time) don't get updated unless you want to pay for it. I pay for my anti-virus protection and it is frequently updated automatically. There are new viruses everyday. If it's free it's more than likely not the best. I'm not trying to sell Norton, but it sure has been good for me.


2014 17' Casita SD