Has Someone Hacked Into My PC Or DIYnot's System?

Whitespirit66

Whitespirit66

Joined
15 Dec 2007
Messages
8,008
Reaction score
2,109
Location
Bristol
Country
United Kingdom
I'm trying to view various pages on this site, but I am continuously getting the pages on here changing to health supplement spam sites. Clicking on different DIYnot pages results in the DIY page briefly appearing before changing to one of two wesites. My Avira and Super Anti Spware security is up to date and scans have been run but found nothing.

These are the links for the sites that keep being substituted for DIYnot pages -

http://lemode-mgz.com/fd/dietluma/i...952&ga_sid=1420828783&ga_hid=605267081&ga_fc=


and


http://lemode-mgz.com/fd/dietluma/i...4&u_java=1&u_h=1024&u_w=1280&u_ah=984&u_aw=12
 
Bizzarely, if I use a proxy server, the site works normally, and pages aren't replaced with websites selling slimming aids.
 
Shouldn't this be in the "Software Section" as it's your browser that has been hijacked.

You have also hit on why "Anti-Anything" is actually a placebo.

It can't detect [Brand) NEW viruses/Trojans/Malware.
 
Ok thanks.

Any idea what I can do about it?

It's only when I'm on this site, and it's still happening today but with different healthfood website appearing.
 
Is this a windows PC?

If so go to C:\Windows\System32\Drivers\etc and open the file called hosts

What is in there? All it should contain is similar to the following unless you have had need to specifically modify it.

# Copyright (c) 1993-2009 Microsoft Corp

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

# For example:

#

# 102.54.94.97 rhino.acme.com # source server

# 38.25.63.10 x.acme.com # x client host


# localhost name resolution is handled within DNS itself.

# 127.0.0.1 localhost

# ::1 localhost
Click to expand...
 
This has been happening to me this weekend as well? Only have an iPad at home so don't know whether it is the same on a PC as well? It doesn't happen on every thread that I click on though!
 
AlanE said:
Is this a windows PC?

If so go to C:\Windows\System32\Drivers\etc and open the file called hosts

What is in there? All it should contain is similar to the following unless you have had need to specifically modify it.

# Copyright (c) 1993-2009 Microsoft Corp



# ::1 localhost
Click to expand...
Click to expand...

Hi Alan. Yes, PC with Windows 7.

Can you tell me how I get to C:\Windows\System32\Drivers\ please? :oops:
 
jamesessex said:
This has been happening to me this weekend as well? Only have an iPad at home so don't know whether it is the same on a PC as well? It doesn't happen on every thread that I click on though!
Click to expand...

Yes, on my Windows 7 desktop. It was a real pain the first day it started. This site was virtually unuseable.

Has got slightly better by itself, but still there. Some menus/pages are OK, other appear briefly before changing to a site for slimming pills. :x

Not happened on any other sites.
 
jamesessex said:
This has been happening to me this weekend as well? Only have an iPad at home so don't know whether it is the same on a PC as well? It doesn't happen on every thread that I click on though!
Click to expand...

I have the same problem with my Ipad. Every time i click on unread posts it takes me to some random site.
 
AlanE said:
Is this a windows PC?

If so go to C:\Windows\System32\Drivers\etc and open the file called hosts

What is in there? All it should contain is similar to the following unless you have had need to specifically modify it.

# Copyright (c) 1993-2009 Microsoft Corp

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

# For example:

#

# 102.54.94.97 rhino.acme.com # source server

# 38.25.63.10 x.acme.com # x client host


# localhost name resolution is handled within DNS itself.

# 127.0.0.1 localhost

# ::1 localhost
Click to expand...
Click to expand...

Managed to open the hosts file, and it is identical to the one you copied.

Looks like we've drawn a blank on that one. Thanks anyway.
 
Am I right in thinking that my problem may be an adware problem? I have tried Superantispyware scan - but nothing found.

Anyone have any other suggestions?
 
Run spybot and check uninstall options in control panel to see if any unrecognised app has been installed recently.
Could also be something installed on the browser check 'ad ons' in firefox.
 
You must log in or register to reply here.
Back
Top