Redirects when navigating in the forum (1 Viewer)

[theBaron]

Is anyone else having this happen?

I access the forum for the first time in a day. I land on the main forum index page (showing the subforums). I click the New Posts link, and I get a redirect to the following page:



The redirect URL starts with www2.aim-search.net. This only started happening last week, after I caught the SafeCastle2012 rogue on my machine, and had the machine cleaned. I'm going to follow up with my tech support, but I wanted to see if anyone else is seeing this behavior in the forum.

Prost!
Brad

 

[jazzeum]

I didn't have that happen to me but that could show someone has invaded the Forum and may be cause for concern.

 

[theBaron]

Very true; I wanted to put the question up, to alert Shannon.

I'm keeping an eye open as I browse the other pages I visit, too. I don't recall having seen this at other sites, yet. If I do, then it's more likely specific to my machine. But I'll post back here with an update, either way.

Prost!
Brad

 

[Peter Reuss]

We're keeping an eye on things...as of right now this seems to be an isolated incident (I don't hear reports from other forums about it either).

If ANYONE else has an issue like this, let me know!

 

[theBaron]

Hi, Padre, I just wrapped up my lunchtime surfing, and hit all of my regular haunts. I didn't see this happen on any of those forums (FineScale, Modeling Madness, Aircraft Resource Center, HyperScale, PlanetFigure, Agape Models). I'm keeping my eyes open as I go, and will continue to post updates.

prost!
Brad

 

[theBaron]

I think it's on my end. I just had another one this morning, when I went to YouTube to play my usual morning tune (Ron Goodwin's "Aces High March" from "The Battle of Britain").

I'm continuing to monitor, but I think it's on my machine.

Prost!
Brad

 

[Peter Reuss]

I think it's on my end. I just had another one this morning, when I went to YouTube to play my usual morning tune (Ron Goodwin's "Aces High March" from "The Battle of Britain").

I'm continuing to monitor, but I think it's on my machine.

Prost!
Brad

Keep me posted!

 

[theBaron]

I figured out what it is. It's a piece of malware called "Get Answers Fast". It's relatively benign, but a nuisance. Apparently it piggybacked on the SafeCastle malware that I caught the other week. It has to be removed manually at this point; McAfee hasn't added it to their catalog of fixes, because it's a low severity threat.

I'm not sure where I got it, but I suspect it was through Facebook. Even though I don't use any of the add-on apps or games, I think FB leaves a door open to this kind of malware.

Prost!
Brad