Page 1 of 2 12 LastLast
Results 1 to 16 of 29

Thread: Hexus access probs

  1. #1
    handscombmp
    Guest

    Hexus access probs

    Just thought i'd brink this up as it's happened to me a couple of time and i want to know if any other people have had it.

    Basically what happens is i type hexus into google and click on the link for the forums. (Community Discussion). Now 9 times out of 10 it is fine and goes to hexus like normal but sometime it takes me this this website.

    http://file2store.info/download.php?id=1044A456

    And shows this


    Now anyone got any ideas

  2. Received thanks from:

    CAT-THE-FIFTH (07-03-2010),Zak33 (07-03-2010)

  3. #2
    Mostly Me Lucio's Avatar
    Join Date
    Mar 2007
    Location
    Tring
    Posts
    5,163
    Thanks
    443
    Thanked
    448 times in 351 posts
    • Lucio's system
      • Motherboard:
      • Gigabyte GA-970A-UD3P
      • CPU:
      • AMD FX-6350 with Cooler Master Seldon 240
      • Memory:
      • 2x4GB Corsair DDR3 Vengeance
      • Storage:
      • 128GB Toshiba, 2.5" SSD, 1TB WD Blue WD10EZEX, 500GB Seagate Baracuda 7200.11
      • Graphics card(s):
      • Sapphire R9 270X 4GB
      • PSU:
      • 600W Silverstone Strider SST-ST60F
      • Case:
      • Cooler Master HAF XB
      • Operating System:
      • Windows 8.1 64Bit
      • Monitor(s):
      • Samsung 2032BW, 1680 x 1050
      • Internet:
      • 16Mb Plusnet

    Re: Hexus access probs

    Sounds to me like the problem my mum was having on a laptop, basically I believe Google has been hijacked to a clone site that displays advertising every now and again instead of the search result you clicked on.

    Never got the bottom of it as it was at christmas, but it was suggested that some kind of alteration to the HOSTS file may have been responsible.

    (\___/) (\___/) (\___/) (\___/) (\___/) (\___/) (\___/)
    (='.'=) (='.'=) (='.'=) (='.'=) (='.'=) (='.'=) (='.'=)
    (")_(") (")_(") (")_(") (")_(") (")_(") (")_(") (")_(")


    This is bunny and friends. He is fed up waiting for everyone to help him out, and decided to help himself instead!

  4. #3
    I'm Very Important
    Join Date
    Jul 2009
    Posts
    2,928
    Thanks
    318
    Thanked
    360 times in 318 posts
    • Domestic_Ginger's system
      • Motherboard:
      • Gigabyte GA-MA770-UD3
      • CPU:
      • Phenom II X2 550
      • Memory:
      • 4GB DDR2
      • Storage:
      • F3 500gb
      • Graphics card(s):
      • 5850
      • PSU:
      • Corsair 550vx
      • Case:
      • NZXT beta evo
      • Operating System:
      • W7
      • Monitor(s):
      • G2222HDL

    Re: Hexus access probs

    Happens to me too! Whats strange is if you go back and they reclick the link in google then hexus forums appears.

  5. #4
    I'm ITX
    Join Date
    Jun 2008
    Location
    Liverpool
    Posts
    2,415
    Thanks
    82
    Thanked
    159 times in 148 posts

    Re: Hexus access probs

    I've seen that page a few times over the past few dats, thought i'd just clicked on the wrong link.

  6. #5
    Banhammer in peace PeterB kalniel's Avatar
    Join Date
    Aug 2005
    Posts
    30,748
    Thanks
    1,787
    Thanked
    3,284 times in 2,646 posts
    • kalniel's system
      • Motherboard:
      • Gigabyte Z390 Aorus Ultra
      • CPU:
      • Intel i9 9900k
      • Memory:
      • 32GB DDR4 3200 CL16
      • Storage:
      • 1TB Samsung 970Evo+ NVMe
      • Graphics card(s):
      • nVidia GTX 1060 6GB
      • PSU:
      • Seasonic 600W
      • Case:
      • Cooler Master HAF 912
      • Operating System:
      • Win 10 Pro x64
      • Monitor(s):
      • Dell S2721DGF
      • Internet:
      • rubbish

    Re: Hexus access probs

    It's a bit like this PHP hack:

    http://news.bbc.co.uk/1/hi/technology/8550219.stm

  7. #6
    Gordy Gordy's Avatar
    Join Date
    Jul 2003
    Location
    Bristol
    Posts
    3,805
    Thanks
    63
    Thanked
    72 times in 50 posts

    Re: Hexus access probs

    Had the same thing here earlier, thought I was going mad.

  8. #7
    handscombmp
    Guest

    Re: Hexus access probs

    OK.

    So is it possible to stop this.

    Which site has been 'compromised'.

    or am i reading the bbc article the wrong way. It didn't seem to explain it that well to me.

  9. #8
    HEXUS.timelord. Zak33's Avatar
    Join Date
    Jul 2003
    Location
    I'm a Jessie
    Posts
    35,157
    Thanks
    3,105
    Thanked
    3,138 times in 1,916 posts
    • Zak33's system
      • Storage:
      • Kingston HyperX SSD, Hitachi 1Tb
      • Graphics card(s):
      • Nvidia 1050
      • PSU:
      • Coolermaster 800w
      • Case:
      • Silverstone Fortress FT01
      • Operating System:
      • Win10
      • Internet:
      • Zen FTC uber speedy

    Re: Hexus access probs

    you're not all going mad... google is having some.... problems

    Quote Originally Posted by Advice Trinity by Knoxville
    "The second you aren't paying attention to the tool you're using, it will take your fingers from you. It does not know sympathy." |
    "If you don't gaffer it, it will gaffer you" | "Belt and braces"

  10. #9
    Senior Member
    Join Date
    Feb 2008
    Posts
    914
    Thanks
    4
    Thanked
    155 times in 143 posts
    • smargh's system
      • Motherboard:
      • Gigabyte GA-EP45-UD3P
      • CPU:
      • Xeon E5450 with 775-to-771 Mod
      • Memory:
      • 16GB Crucial
      • Storage:
      • Intel X25-M G2 80GB/Adaptec 3405 4x 2TB Ultrastar RAID1 / 1x 6TB Hitachi He6 / Dying 2TB Samsung
      • Graphics card(s):
      • GTX 750 Ti
      • PSU:
      • Seasonic X-560
      • Case:
      • Lian-Li PC-A71
      • Operating System:
      • Windows 7 Ultimate 64bit
      • Monitor(s):
      • BenQ G2400WD
      • Internet:
      • Really Crap ADSL2 <3Mbit

    Re: Hexus access probs

    Huh. Hexus appears to have been hacked.

    You must have Google as the referer, and you must not already have the Hexus cookie "vbsp" set to 1 - you will only get redirected if that cookie exists.

    Here's the code you get when you go via Google and don't already have the cookie: http://pastebin.com/H74nR6UQ

    And here's an unpacking & analysis of that Javascript: http://jsunpack.jeek.org/dec/go?repo...9139c49690d0f0

  11. #10
    Senior Member
    Join Date
    Jul 2003
    Location
    Holsworthy, Devon
    Posts
    513
    Thanks
    9
    Thanked
    11 times in 11 posts
    • Ben Rogers's system
      • Motherboard:
      • Asus P8P67 B3
      • CPU:
      • Intel core i5 2500k @ 4400MHz
      • Memory:
      • 12GB DDR3 (8GB Corsair Vengeance 1600MHz)
      • Storage:
      • 60GB OCZ Agility 3 SSD (boot) + 1TB Samsung F3 + 500GB Samsung F1 SATA II
      • Graphics card(s):
      • MSI HD7870 2GB
      • PSU:
      • 650W Coolermaster VX
      • Case:
      • Coolermaster Centurion 5 II
      • Operating System:
      • Windows 7 64 bit SP1
      • Monitor(s):
      • 19" Samsung SyncMaste
      • Internet:
      • 23Mbit / 1.1 Mbit ADSL2

    Re: Hexus access probs

    I've had this earlier but didn't think much of it as I had just woken up and thought I had clicked an advert or something and it was a full screen pop up.
    E6850@ 3700MHz / 6GB DDR2 / 500GB SATAII / nVidia 7800 GTX / Lian Li Plus7B

  12. #11
    Registered User
    Join Date
    Mar 2010
    Posts
    1
    Thanks
    0
    Thanked
    0 times in 0 posts

    Re: Hexus access probs

    This appears to be a vBulletin flaw. I was redirected at another site to a similar link on file2share DOT info and they too were running vBulletin. I think anything older than VB 3.3.4 is vulnerable.

    Those of you who were redirected to the link, did it try to download malware? I've been trying to make sure my PC was clean after the redirect and am curious if the file2share DOT info site is distributing malware. Thanks.

  13. #12
    Senior Member
    Join Date
    Jul 2004
    Location
    London
    Posts
    2,456
    Thanks
    100
    Thanked
    75 times in 51 posts
    • Mblaster's system
      • Motherboard:
      • ASUS PK5 Premium
      • CPU:
      • Intel i5 2500K
      • Memory:
      • 8gb DDR3
      • Storage:
      • Intel X25 SSD + WD 2TB HDD
      • Graphics card(s):
      • Nvidia GeForce GTX 570
      • PSU:
      • Corsair HX520
      • Case:
      • Antec P180
      • Operating System:
      • Windows 7 Professional x64
      • Monitor(s):
      • HP w2207 (22" wide)
      • Internet:
      • Rubbish ADSL

    Re: Hexus access probs

    I've seen something very similar to this before where the site had been compromised and the .htaccess file had code in it to redirect only when the referrer was a search engine. Designed to go unnoticed to the web master since it's not likely they'll be searching for their own site.

    No idea if it's the same thing though, haven't experienced it on Hexus myself, but sounds similar.
    I don't mean to sound cold, or cruel, or vicious, but I am so that's the way it comes out.

  14. #13
    HEXUS webmaster Steve's Avatar
    Join Date
    Nov 2003
    Posts
    14,276
    Thanks
    292
    Thanked
    837 times in 473 posts

    Re: Hexus access probs

    Looking into this now, thanks guys!
    PHP Code:
    $s = new signature();
    $s->sarcasm()->intellect()->font('Courier New')->display(); 

  15. #14
    HEXUS webmaster Steve's Avatar
    Join Date
    Nov 2003
    Posts
    14,276
    Thanks
    292
    Thanked
    837 times in 473 posts

    Re: Hexus access probs

    Can anyone confirm whether, as of right now, they're still getting this?
    PHP Code:
    $s = new signature();
    $s->sarcasm()->intellect()->font('Courier New')->display(); 

  16. #15
    Senior Member
    Join Date
    Feb 2008
    Posts
    914
    Thanks
    4
    Thanked
    155 times in 143 posts
    • smargh's system
      • Motherboard:
      • Gigabyte GA-EP45-UD3P
      • CPU:
      • Xeon E5450 with 775-to-771 Mod
      • Memory:
      • 16GB Crucial
      • Storage:
      • Intel X25-M G2 80GB/Adaptec 3405 4x 2TB Ultrastar RAID1 / 1x 6TB Hitachi He6 / Dying 2TB Samsung
      • Graphics card(s):
      • GTX 750 Ti
      • PSU:
      • Seasonic X-560
      • Case:
      • Lian-Li PC-A71
      • Operating System:
      • Windows 7 Ultimate 64bit
      • Monitor(s):
      • BenQ G2400WD
      • Internet:
      • Really Crap ADSL2 <3Mbit

    Re: Hexus access probs

    I stopped being able to replicate this at about 11pm last night - I assumed that a Hexite had sorted it without adding a reply to this thread. Confirmed now that it's still not doing it, and the vbsp cookie isn't being created any more.

    That's not to say that the original flaw still remains, or perhaps even the malware dudes removed the business bits when they noticed that the page they were redirected to was broken (or they noticed this thread).

  17. #16
    HEXUS webmaster Steve's Avatar
    Join Date
    Nov 2003
    Posts
    14,276
    Thanks
    292
    Thanked
    837 times in 473 posts

    Re: Hexus access probs

    It looks like lots of VB based sites have been attacked in the past week or two so I'm keeping an eye on investigations into the cause and will take further action as needed.
    PHP Code:
    $s = new signature();
    $s->sarcasm()->intellect()->font('Courier New')->display(); 

Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Hexus Wiki
    By Disturbedguy in forum General Discussion
    Replies: 38
    Last Post: 25-10-2011, 12:38 PM
  2. HEXUS looking to go one better
    By Steve in forum General Discussion
    Replies: 7
    Last Post: 01-01-2006, 08:13 PM
  3. Replies: 278
    Last Post: 07-06-2005, 12:38 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •