Is there something wrong with Shockernet or is it my Computer

[1979Shocker]

If it is onclickads, try the steps at this site, carefully. The steps start about halfway down the page.

http://www.virusresearch.org/remove-...me-firefox-ie/

I didn't see onclkads app installed looking at Apps & Features and I didn't see any unusual extensions in my browsers. My extensions are either disabled or I don't have any. It would seem that if I did have an onclkads extension or something similar installed, then it would happen on other webpages besides Shockernet.

[TheGr1z]

I am having the same issue on both my iPhone and my Mac (Safari).

[Shoxfan11]

Having the same issue as well. Definitely site-side

[ShockBand]

Well, if it isn't appearing on a deep search locally, then it is likely server-side. I will alert Kai and see if I can help him ferret out the issue.

[1979Shocker]

Well, if it isn't appearing on a deep search locally, then it is likely server-side. I will alert Kai and see if I can help him ferret out the issue.

Thanks.

[Kung Wu]

It's 100% server side. vBulletin is serving up a script from url.ie called 11o2s. Just need to grep the vBulletin software for that and disable whatever component is serving it up. Probably need to upgrade/patch vBulletin too.

[Kung Wu]

Also 11o2t, but really just search for "url.ie" and then you will know what part of vBulletin has been hacked. If it doesn't appear in the source then it might be a SQL injection (in the HEAD section or something).

[ShockBand]

Thanks, Kung Wu. I just ran an network check with Chrome dev tools, and found that url.ie (2 in fact) as well. Those are URL shorteners and redirect to sumpin' shitty. I also advised Kai to check the main page HTML for a rogue div inject.

[Kung Wu]

Thanks, Kung Wu. I just ran an network check with Chrome dev tools, and found that url.ie (2 in fact) as well. Those are URL shorteners and redirect to sumpin' shitty. I also advised Kai to check the main page HTML for a rogue div inject.

Should be easy for his host to find. It's whatever code runs between google-analytics and the vbulletin-core. I see yui in there but that may be part of the url.ie hack.

[jdshock]

Also 11o2t, but really just search for "url.ie" and then you will know what part of vBulletin has been hacked. If it doesn't appear in the source then it might be a SQL injection (in the HEAD section or something).

If that doesn't work, you can always torque up the phaser caddies, and hope the hyperdrive gems with the PLCTV.onion verged cards.

[1979Shocker]

It's 100% server side. vBulletin is serving up a script from url.ie called 11o2s. Just need to grep the vBulletin software for that and disable whatever component is serving it up. Probably need to upgrade/patch vBulletin too.

Also 11o2t, but really just search for "url.ie" and then you will know what part of vBulletin has been hacked. If it doesn't appear in the source then it might be a SQL injection (in the HEAD section or something).

It looks like 11o2s redirections to onclkds.com and 11o2t redirections to pushnative.com.

CheckShortURL

[Aargh]

My bookmark to SN comes up clean with no interference.

Same thing if I type the url. I've got no problems, so if it's on the server side it seems that perhaps it doesn't affect Win7?

[Kung Wu]

My bookmark to SN comes up clean with no interference.

Same thing if I type the url. I've got no problems, so if it's on the server side it seems that perhaps it doesn't affect Win7?

Might depend which version of each browser you are running.

[wusphlash]

I think Palm has hacked Shockernet.

[SHOXJOCK]

Had the same problem the last 48 hours. I ran windows defender the full scan. It can back and said I had a virus " SupportScam:JS/techBrolo.aa" . I deleted it seems ok now. Hope this helps.