BUGA Community
General Category => The Sump => Topic started by: petrolhead on February 21, 2012, 05:21:31 PM
-
what a f#ked up site that lets this happen I got a notification that there were new posts in what have you been up to instead i'm now infected with a virus that just sux
-
????
Iv been using the site all day and got nothing.
-
Not sure if it's related but last night I tried about 6 times to view comments On the Buga site etc
on my iPad
Then all of a sudden I was told the site was redirecting to something called a slut bomb
So I quickly disconnected and deleted all cookies and history reset my adsl modem
And after that everything was normal.
I was about to challenge my sons as to whether they had been surfing naughty sites
But seeing your comments I wonder if it was related. :'(
Cheers
Ian
-
I just went on th site and it loaded 11 sex scandles with u tube, So i deleted cookies etc. seems ok now
-
when I first hit the icon it came up as Emma Watson, something. so I shut it down and then the Buga site came up
-
hey i thought it was my computer too..when i sometimes click on a post i get some pic of a girl...seems to redirect me to another site....
do hope Warren maybe able to get to the bottom of this one!
-
had the same problem olny happens wen i first go into buga when computers been restarted
-
yep me to >:(
-
delete your cookie files mite help aye
-
????
Iv been using the site all day and got nothing.
Same here - logged on both at home and work
-
what a f#ked up site that lets this happen I got a notification that there were new posts in what have you been up to instead i'm now infected with a virus that just sux
It wont be the BUGA site, it is a shortcoming of the Internet. IP addressing works on trust. I could set up a virtual site and masquerade as someones site dishing out crap to anybody. Usually it doesn't last long.
-
Touch wood i haven't had an issue with the site yet .
I'd tend to agree with the comment made in one of the other posts about the Fake users that sign up with fake user names and web site links that have most likely hacked into the sites IP addres and are redirecting us genuine users to the linked porn/spam sites. for example Muppets like: emdadr657, 1Bestoop, Pardz_05
possibly the Moderators/Site Owners need to do something to be change how a new member signs up and gets their account activated to eliminated the spam bots from over-riding and continually signing up for memberships to the site and show that they are actually human and are on here for genuine reasons like all of us beddy fans. this is such a great site and i would hate to see it ruined by the tossers that are hacking into it
Scott
-
i havent had a problem.
-
Here here Scott the dodgy e- mail notifications I got I forwarded on to the mods to see if they can fix it what's these cookies you talk about and do I need to delete them?
-
In the last couple of days I've been getting Potential Threat messages popping up from my Anti Virus Protector whenever I come onto this site now. So something's going on somewhere here. I'm not very computer savvy, so I don't know what to make of it. Something about URL and IP addresses are getting blocked by my Anti Virus Protector here.
-
My Antivirus Protector is alerting me that there is a portential threat here: "HTML/ScrInject.B.Gen Virus" ::)
-
My Antivirus Protector is alerting me that there is a portential threat here: "HTML/ScrInject.B.Gen Virus" ::)
This is an issue with a lot of different Antivirus solutions at the moment. You need to make sure its updated.
Everyone else having problems loading images from other sites when coming here, what ISP's are you using?
-
wow what a pain this virus has been,
i logged out and got locked out.
updated antivirus etc,
was just about to delete buga forever.
n forget about ever trying logging back in.
still not sure if its safe?
cheers marty
-
I have run a bunch of scans on the site and found nothing. You're welcome to fine some website scanners and test it yourself. In fact if would be helpful if you did.
-
Here here Scott the dodgy e- mail notifications I got I forwarded on to the mods to see if they can fix it what's these cookies you talk about and do I need to delete them?
Cookies are basic information kept by your ISP(internet search provider) and are used to speed up the loading of websites you frequent. most cookies are harmless, but there are those that are used as tracking cookies to see where and what you surf on the net and the information is relayed back to the ISP or websites where you got it from, that why when you visit some websites the come with your email address pre-typed in. cookies are easy to get ride of, there are a couple of ways
the first one is if you go to the control panel, open it and then select and open Internet Options it should come up with a page/box titled Internet Properties that looks like this :
http://www.buga.com.au/index.php?option=com_gallery2&Itemid=21&g2_itemId=38956 (http://www.buga.com.au/index.php?option=com_gallery2&Itemid=21&g2_itemId=38956)
click on the delete under Browsing History which should open another box that looks like this one
http://www.buga.com.au/index.php?option=com_gallery2&Itemid=21&g2_itemId=38958 (http://www.buga.com.au/index.php?option=com_gallery2&Itemid=21&g2_itemId=38958)
(sorry couldn't get it to load the photo's)
click/tick the boxes of what ones you want deleted Especailly cookies and Temporay Internet Files, click Delete and it will clear all the cookies and past history/useless info that uses up space on your computer and is not needed
and you should be away laughing
Also you can open Internet Options via the tools menu on your browser
hope that helps
Scott
-
no need shane .
i have full faith in you.
ive set mine to delete browsing history on exit now, i dont care if it takes longer to load pages,
just dont want dramas in future.
what caused the redirection to porn sites? and our virus warnings to go beserk?
cheers marty
-
Unfortunately our ISP's transparent proxy servers are the cause of most problems. A proxy server stores images on sites to speed your browsing sessions and save your ISP money by not having to download the same image time and time again. Unfortunately some times the saved images can get mixed up and appear on pages they are really not meant to be on. These problems happen mostly on websites that are hosted on servers that are share with other websites hosting the porn sites. The only way around this is to host the site on a private server (read $$$) or host the site with a host that doesn't allow porn sites(which we already are).
The virus issue is most probably be cause the false images you load are most likely scripted to redirect you to other sites that contain viruses.
You'll see the following test has checked our site ok.
http://www.avgthreatlabs.com/sitereports/domain/www.buga.com.au/domain-search-widget/www.avg.com.au (http://www.avgthreatlabs.com/sitereports/domain/www.buga.com.au/domain-search-widget/www.avg.com.au)
-
G'day
I reckon its a conspiracy by jealous Transit owners.
- I guess it's one of those "you had to be there moments" :/
-
i recon its got something to do with the word BUGA.
thats why i never bought 1 of the t/shirts.
lol.
=FOBFBG :D :o :o
instead of BUGA i recon BOGA, HAHAHA
BEDFORD OWNERS GROUP AUSTRALIA
BOGA=far out but then we migjht get fowarded to a snot site with lots of slimy snot, noses, and face excretions. ()there,s no vomit icons)
::) :-\ :-X ::) :o
or maybe BOADGA
BEDFORD OWNER AND DREAMER GROUP AUSTRALIA?????????????
-
My Antivirus Protector is alerting me that there is a portential threat here: "HTML/ScrInject.B.Gen Virus" ::)
This is an issue with a lot of different Antivirus solutions at the moment. You need to make sure its updated.
Everyone else having problems loading images from other sites when coming here, what ISP's are you using?
ISP'S??? Sorry, I have no idea what that means. I am very computer illiterate in the area of viruses and many other facets. I did a scan on my ESET and it told me there were 10 infiltrations. I deleted off all the threats. But as soon as I came back on here, it's started again. So must definately be something nasty lurking here. I'm now very reluctant to come back on here. :o :o ::) Cheers.
-
internet service provider kerry.
whoever supplies your internet.
ie/ telstra, optus dodo etc.
cheers marty
-
i had a virus as well on the buga site..
it kept directing to a antivirus site telling me i should do a scan
its gone now..
definatly was this site..
AGV is a free antivirus
or download a free trial for 30 days NORTON..
-
My Antivirus Protector is alerting me that there is a portential threat here: "HTML/ScrInject.B.Gen Virus" ::)
This is an issue with a lot of different Antivirus solutions at the moment. You need to make sure its updated.
Everyone else having problems loading images from other sites when coming here, what ISP's are you using?
ISP'S??? Sorry, I have no idea what that means. I am very computer illiterate in the area of viruses and many other facets. I did a scan on my ESET and it told me there were 10 infiltrations. I deleted off all the threats. But as soon as I came back on here, it's started again. So must definately be something nasty lurking here. I'm now very reluctant to come back on here. :o :o ::) Cheers.
It could be that you actually have a virus on your computer. There was/is a bug with Eset that reports viruses on webpages that really dont have viruses on them. See this forum: http://www.wilderssecurity.com/showthread.php?t=316216 (http://www.wilderssecurity.com/showthread.php?t=316216)
Kerry, if you continue to have problems with your computer, please call me on 0731881444
Shane
-
AGV is a free antivirus
or download a free trial for 30 days NORTON..
Please don't use Norton. Its rubbish. Avg is much better but it is getting a little bloated.
For a really good Antivirus Solution for home PC's please download and install Avast Antivirus.
-
G'day
Security on your PC is a bit more than having antivirus software.
A good site for Freeware is:
http://www.techsupportalert.com/ (http://www.techsupportalert.com/)
A good read is:
http://www.techsupportalert.com/how-to-secure-your-pc.php (http://www.techsupportalert.com/how-to-secure-your-pc.php)
another is:
http://www.techsupportalert.com/content/probably-best-free-security-list-world.htm (http://www.techsupportalert.com/content/probably-best-free-security-list-world.htm)
If that doesn't scare you then nothing will.
-
Paid Norton was the absolute worst-Ripoff,sick computer all the time on that shit,
BEST freebie is AVAST,not one prob ever in 2yrs ive had it,always safe..and it talks to u too,kool! ;D
(i recon its got something to do with the word BUGA.
thats why i never bought 1 of the t/shirts.
lol.
=FOBFBG :D :o :o
instead of BUGA i recon BOGA, HAHAHA
BEDFORD OWNERS GROUP AUSTRALIA
BOGA=far out but then we migjht get fowarded to a snot site with lots of slimy snot, noses, and face excretions. ()there,s no vomit icons)
::) :-\ :-X ::) :o
or maybe BOADGA
BEDFORD OWNER AND DREAMER GROUP AUSTRALIA?????????????
Question Marty: Did u have a joint for Brunch today,lol!! :P
-
lol, nagh gave that up about 10 years ago :D
burbons my poison now, ;D
-
Hey Guys, i just got hit again.
Finally someone i can talk to, i'm with you kerry, i am a pc dummy, all this computer tech talk is going over my head. ;D ;D ;D ;D My teck guy sets up my pc and thats it i dont change anything, i tun it on and off, search and talk on here.
I guess it was only a matter of time b4 this site got hit, now we just have to get it sorted so we can get back to business.
I wonder, could the use of the word bediphile have attracted the porn virus ? ??? ;D ;D ;D ;D hey told you i was a pc dummy. lol ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D
george
-
:D yeah it was prob YOU George!!!
LOL, :D :D :D
-
I plead innocent to all charges. lol ;D ;D ;D ;D ;D ;D ;D ;D
george
-
My Antivirus Protector is alerting me that there is a portential threat here: "HTML/ScrInject.B.Gen Virus" ::)
This is an issue with a lot of different Antivirus solutions at the moment. You need to make sure its updated.
Everyone else having problems loading images from other sites when coming here, what ISP's are you using?
ISP'S??? Sorry, I have no idea what that means. I am very computer illiterate in the area of viruses and many other facets. I did a scan on my ESET and it told me there were 10 infiltrations. I deleted off all the threats. But as soon as I came back on here, it's started again. So must definately be something nasty lurking here. I'm now very reluctant to come back on here. :o :o ::) Cheers.
It could be that you actually have a virus on your computer. There was/is a bug with Eset that reports viruses on webpages that really dont have viruses on them. See this forum: http://www.wilderssecurity.com/showthread.php?t=316216 (http://www.wilderssecurity.com/showthread.php?t=316216)
Kerry, if you continue to have problems with your computer, please call me on 0731881444
Shane
G'Day Shane, My computer is functioning fine in all other aspects. It's only when I come on here, that I keep getting the "Potential Threat" alerts. ('WARNING! WARNING! DANGER WILL ROBINSON!!") Which only started when everybody else starting complainging of the virus. I believe I am protected from Virus it's just that it's warning me that there's something here. I don't get the message on anything else I browse on the internet.. Is that a mobile number? I don't call mobiles as it's like a $1 a minute! (I'm on a really stupid plan)...thanks for that anyway, I will check out the link you gave me. Cheers, Shane. K.
-
My Antivirus Protector is alerting me that there is a portential threat here: "HTML/ScrInject.B.Gen Virus" ::)
This is an issue with a lot of different Antivirus solutions at the moment. You need to make sure its updated.
Everyone else having problems loading images from other sites when coming here, what ISP's are you using?
ISP'S??? Sorry, I have no idea what that means. I am very computer illiterate in the area of viruses and many other facets. I did a scan on my ESET and it told me there were 10 infiltrations. I deleted off all the threats. But as soon as I came back on here, it's started again. So must definately be something nasty lurking here. I'm now very reluctant to come back on here. :o :o ::) Cheers.
It could be that you actually have a virus on your computer. There was/is a bug with Eset that reports viruses on webpages that really dont have viruses on them. See this forum: http://www.wilderssecurity.com/showthread.php?t=316216 (http://www.wilderssecurity.com/showthread.php?t=316216)
Kerry, if you continue to have problems with your computer, please call me on 0731881444
Shane
G'Day Shane, My computer is functioning fine in all other aspects. It's only when I come on here, that I keep getting the "Potential Threat" alerts. ('WARNING! WARNING! DANGER WILL ROBINSON!!") Which only started when everybody else starting complainging of the virus. I believe I am protected from Virus it's just that it's warning me that there's something here. I don't get the message on anything else I browse on the internet.. Is that a mobile number? I don't call mobiles as it's like a $1 a minute! (I'm on a really stupid plan)...thanks for that anyway, I will check out the link you gave me. Cheers, Shane. K.
G'Day Shane, did check out link, but all so way over my head. I'm new to computers, don't know the lingo, never had a virus. I'm at that point where I'm too scared to come on this site anymore. Could you ring me perhaps, to sort it out? Any advice would be much appreciated. My number is 042 575 5269 anytime after 7:00 pm.
-
I believe there is no virus here.
I have no problems using this site.
-
well i just tried to logon and was redirected to a different site....
-
It's not a site virus or we would all be hit.
Update your virus program and run, also
download and run spybot search and destroy (or any of the free spyware programs)
you'll probably find it's a 3rd party cookie doing it. a cookie is just a text file served from somewhere, in this case spyware, scumware, malware etc that you could of picked up from another website, email, CD etc.
You need cookies for login details etc but there is an option in your browser settings to disallow 3rd party cookies.
Also if your using Internet Explorer ... we wont get into it, but update to latest version, download the million security patches and cross your fingers, or better yet get a decent browser
-
My Antivirus Protector is alerting me that there is a portential threat here: "HTML/ScrInject.B.Gen Virus" ::)
This is an issue with a lot of different Antivirus solutions at the moment. You need to make sure its updated.
Everyone else having problems loading images from other sites when coming here, what ISP's are you using?
ISP'S??? Sorry, I have no idea what that means. I am very computer illiterate in the area of viruses and many other facets. I did a scan on my ESET and it told me there were 10 infiltrations. I deleted off all the threats. But as soon as I came back on here, it's started again. So must definately be something nasty lurking here. I'm now very reluctant to come back on here. :o :o ::) Cheers.
It could be that you actually have a virus on your computer. There was/is a bug with Eset that reports viruses on webpages that really dont have viruses on them. See this forum: http://www.wilderssecurity.com/showthread.php?t=316216 (http://www.wilderssecurity.com/showthread.php?t=316216)
Kerry, if you continue to have problems with your computer, please call me on 0731881444
Shane
G'Day Shane, My computer is functioning fine in all other aspects. It's only when I come on here, that I keep getting the "Potential Threat" alerts. ('WARNING! WARNING! DANGER WILL ROBINSON!!") Which only started when everybody else starting complainging of the virus. I believe I am protected from Virus it's just that it's warning me that there's something here. I don't get the message on anything else I browse on the internet.. Is that a mobile number? I don't call mobiles as it's like a $1 a minute! (I'm on a really stupid plan)...thanks for that anyway, I will check out the link you gave me. Cheers, Shane. K.
G'Day Shane, did check out link, but all so way over my head. I'm new to computers, don't know the lingo, never had a virus. I'm at that point where I'm too scared to come on this site anymore. Could you ring me perhaps, to sort it out? Any advice would be much appreciated. My number is 042 575 5269 anytime after 7:00 pm.
Sorry mate, I didn't get this message in time. I can arrange to call you tomorrow night if you're available.
-
ok thanx busy ..i did run a full system scan ....just prior to logining on as someone else suggested on this site....and yes there were heaps of cookies removed....yet it still did it...earlier on this evening i mean ..... but not just now??
will def start using a different browser then like firefox or is there any others u could suggest?
thanx for ur help ;)
-
Firefox is my choice. But every now and then it still gets caught up with old cache.
-
yep :o just logged in after a few days absence..an got 2 windows open with emma watson crap, explorer wouldnt open it ,thankfully, opened task manager, but it wouldnt end either till i went into processes n shut it down that way then back to faves opened buga an logged in fine ....as you can see, takes more than a poofta virus to scare skippy off this site...ay!! ;)... ps wendy.... i had martys brunch for him ;D ;D ;D ;)
-
If you have BUGA in your favorites try deleteing it out and then reload back into your favorits
-
Have been doing a bit of testing with this on a virtual machine. The virtual machine is basically a software PC for those of you who have no idea what I'm talking about. This machine was a basic XP build with no other applications except a virus scanner loaded. It's something I can reset in a couple of minutes if it gets infected.
I navigated Internet Explorer to www.buga.com.au (http://www.buga.com.au) and was instantly redirected to another website. It appears it was an old link however that no longer works as I got an error message in my browser window. After canceling that every time I went to the homepage I was not redirected and had no problems. I then scanned the entire machine and found no virus infected files.
I then reset the virtual machine but could not get it to occur again.
As Shane has said the site is not infected. The virus infections are coming from the websites you are being redirected to. If you close the redirected website window or tab before it loads you should be fine.
I would say that one of the DNS sites that stores the site information has been compromised and when this particular DNS provider is accessed we get redirected. If another provider is accessed that is not compromised you won't have an issue and you can get to the homepage as per normal.
There's not a lot we can do about it other than Shane advising the site hosts of the issue so they can investigate having the offending DNS provider's cache purged if it can be tracked.
In the meantime if you save the following link in your 'favourites' if you are using IE and in your 'bookmarks' if you are using Firefox you will go straight to the forum each time which will bypass the main page and the redirection issue. You should be able to get wherever you need to go from the forum main page.
http://www.buga.com.au/index.php?option=com_smf&Itemid=2 (http://www.buga.com.au/index.php?option=com_smf&Itemid=2)
Of course this doesn't help new people to the site if they access the homepage for the first time and are redirected to a website that infects their machines which is really irritating as we don't want to have the site blacklisted.
-
I just logged on using my iPad and it redirected me to an adult matchmaking site.
I cleared history and cookies and cache and reloaded the Buga site and it's working
Normal.
The IPad is like a virtual machine in that it can be easily rebooted and clears the memory.
So something out in cyberspace is obviously redirecting traffic to sites with nasty content
Or content of shall we say a dubious nature.
Not sure who or what is causing it or if it's someone deliberately trying to hack the site.
Cheers
Ian
-
did the same thing and that was days ago now got the problem again only when i first go on buga
-
well Iv just spent most of last night and today installing Avast, ad-aware, firefox and running checks, deleting cookies, scanning for issues, deleting IE9 and still, if I'm using IE it fails to load BUGA - because Avast is killing the redirection.
Had a few hick ups withe firefox at first, but seems to be working OK now.
I can't find where its getting the re directions from, and other PCs arent doing it - so BUGAed if I know whats going on :)
Warren
-
I can't find where its getting the re directions from, and other PCs arent doing it - so BUGAed if I know whats going on :)
Warren
G'day
Are running XP?
If so try resetting the winsock with a little free utility called WinSock XP Fix 1.2.
Whenever I have Internet problems I run it. It is a great little tool.
-
must be in the buga server as its still doing it ive delete cookies and browser history deleted the favorites dose not work its not the computer im on has been totally scaned and it only happen when computer been off the turned on then i go on the buga site
-
As has been stated numerous times in this thread by different members it is not the BUGA website that is infected. Read the attached link. This is most probably what is happening. I've given everyone a work-around earlier in the thread. Your choice not to use it.
http://www.spamlaws.com/dns-hijacking.html (http://www.spamlaws.com/dns-hijacking.html)
-
I can't find where its getting the re directions from, and other PCs arent doing it - so BUGAed if I know whats going on :)
Warren
G'day
Are running XP?
If so try resetting the winsock with a little free utility called WinSock XP Fix 1.2.
Whenever I have Internet problems I run it. It is a great little tool.
Thanks Chris, but I'm running Vista on that machine
Warren
-
Ok Guys, my Anti-Malware software, tells me that is blocking threats for the Buga site every time I log on - it says it is outgoing and is generatored from the Buga site.
-
Please email me the log or post the details here. What Anti-malware software are you using?
-
Ok, for those that want to stop this redirecting to other websites, download the malware software from the link below (free version) you will be asked if you want to try the full version, accept this as it will just set it self back to the free verson after 30 days. When you log onto buga this malware will stop you from being redirected so every thing works as normal, you will get a little popup at the bottom of the screen for Malwarebytes to let you know that a threat has been blocked. Shane as I don't run the full version I can not acces the log for this block as it is not registered, but the popup lets you know the details / outgoing theat from the Buga site, IP address matches that of Buga. This would explain why it does not happen elsewhere on the net.
http://www.malwarebytes.org/ (http://www.malwarebytes.org/)
-
cheers Bas,
thanx for the link.
i just downloaded it and it works good,
like you said it just poped up a little message saying it just blocked a malicious site and i never got redirected to the smut site.
cheers marty
-
Yeah thanx Baz i just did the same thing and everytime i click on a new psot the little box pops up to tell me it has blocked a potential threat! it is def linked to buga site..what a buga too i do hope it hasnt put off to many bugas visiting our site?
bloddy bugger off to the low life who infected us >:( >:(
-
That's great guys, I am no expert, Shane would know more than me, but in the mean time this works and keeps us safe, If or what is infected I'am not sure, may be BUGA may be Not, as it only happens on a visit to Buga it is mixed up in it some how, may be only as a 3rd party who knows ???.
-
I'm visiting colleagues here in Auckland NZ and using my iPad I'm still being redirected to
These smut sites.
I can't download the malware software , so all I can do is to regularly delete history and cookie.
Hopefully someone will find where the Trojan redirection is on the website or what ever is pointing to the BUGA site.
cheers
Ian
Ps I saw 2 beddys on my morning walks here in West HARBOUR, one a motorhome and the second a pop top camper. :P
-
what a f#ked up site that lets this happen I got a notification that there were new posts in what have you been up to instead i'm now infected with a virus that just sux
a f#ked up site??? You mean this site that you more than regularly visit along with thousands of other people each day?
-
what a f#ked up site that lets this happen I got a notification that there were new posts in what have you been up to instead i'm now infected with a virus that just sux
take 2 asprins and see a doctor if symptoms persist.
-
definatly this site....havent been able to get on for days...
-
Yes the site has been compromised. Luckily we have no malware on the site. The problem only effects some people when they are directed to other sites.
-
Goddam pc's...no probs on the mac!! ;)
-
Um.. My iPad is a Mac and it is getting redirected to smut sites when I try to log on at
The BUGA home page.... ???
So somethings not right eh?
-
do you guys using buga.com.au or www.buga.com.au? (http://www.buga.com.au?)
-
Infection Details
URL: "http://www.buga.com.au/gallery2/main.ph...
Process: "C:\ProgramFiles\MozillaFirefox\firefox....
Infection: "HTML:Script-inf"
Does this help?
What Avast told me.
-
Infection Details
URL: "http://www.buga.com.au/gallery2/main.ph...
Process: "C:\ProgramFiles\MozillaFirefox\firefox....
Infection: "HTML:Script-inf"
Does this help?
What Avast told me.
Good link / URL, must be infected :D
-
i think url is dead, RIP url. :D
reminds me of the Blob.
anyone remember the BLOB? :o
The Blob Trailer [Original 1988] (http://www.youtube.com/watch?v=sixDADVVnxA#)
-
the blob
great movie
hope they do a remake
-
Ok it's time for this guy to go.......... Admin please remove ( CewObenue )
-
yep sure am sick of this whatever it is. every morning i get hit, and only on here. Once i disconnect and reconnect not a problem.
george
-
Ok, for those that want to stop this redirecting to other websites, download the malware software from the link below (free version) you will be asked if you want to try the full version, accept this as it will just set it self back to the free verson after 30 days. When you log onto buga this malware will stop you from being redirected so every thing works as normal, you will get a little popup at the bottom of the screen for Malwarebytes to let you know that a threat has been blocked. Shane as I don't run the full version I can not acces the log for this block as it is not registered, but the popup lets you know the details / outgoing theat from the Buga site, IP address matches that of Buga. This would explain why it does not happen elsewhere on the net.
http://www.malwarebytes.org/ (http://www.malwarebytes.org/)
George download this antimalware prog that Bas recomended.
its fixed my drama,s of being redirected.
thanx again Bas
cheers marty