my forum links are getting redirected to www.mybookface.net

v-tec · Hangin' Around Joined: Jul 19, 2009 Posts: 33

help !!

my forum links are getting redirected to

Only registered users can see links on this board!
Get registered or login to the forums!

and my site has got nothing to do with that wannabe site ^

links that is corrupted and gets directed to mybookface.net

Only registered users can see links on this board!
Get registered or login to the forums!

is the category the post is at.

Any ideas on how i can stop this annoying redirecting nuisance Twisted Evil

and btw my site is on free hosting plan , is it because it is on free hosting

nuken · Posted: Mon Nov 16, 2009 3:48 pm

You could disable html in the forums. That should disable whatever redirect that was posted.

v-tec · Hangin' Around Joined: Jul 19, 2009 Posts: 33

does it mean all links posted on the forum will go inactive ?
will disabling html stop the forced redirecting problem

v-tec · Hangin' Around Joined: Jul 19, 2009 Posts: 33

update :
disabling html is not working, the certain links to the posts in the forum are getting redirected to this annoying mybookface.net website

eldorado · Involved Joined: Sep 10, 2008 Posts: 366 Location: France

Maybe go in phpmyadmin and look for all the posts in that forum...You might see that wanabe stuff Wink

v-tec · Hangin' Around Joined: Jul 19, 2009 Posts: 33

thanks for the idea mate.
i will give myphpadmin a go

evaders99 · Posted: Mon Nov 16, 2009 8:19 pm

Simple issue: you've been hacked!
Your link is returning malicious iframe and Javascript code. I expect your files have been tampered with. Delete and restore a clean backup. Use your access logs to see how the hacker got in.

unicornio · Involved Joined: Aug 13, 2009 Posts: 410

Ups. I agree with evaders99. This is not a normal redirect behaviour. U have been hacked for sure.

Guardian2003 · Posted: Tue Nov 17, 2009 9:51 am

Check your htaccess file as well as that is being redirected as well.

v-tec · Hangin' Around Joined: Jul 19, 2009 Posts: 33

cheers for your response mates.
I found out what was causing the problem
the ebay link with eBayISAPI.dll was causing the mayhem.
i am not sure why so it could be the windows system function the .dll extenstion calls . Basically any post with eBayISAPI.dll goes all bananas .
removed the eBayISAPI.dll from affected posts and now no redirections no errors. Can anyone explain whats causing it ? (anything within Raven Nuke ? )

And plus how many sites on Raven nuke has been hacked so far? As i think RN is much safer compared to a lot of CMS around atm.

nuken · Posted: Thu Nov 19, 2009 4:30 pm

where was the .dll file stored? on your site or a remote server? How was it included in the post?

edit: Are you using byethost for your webhosting?

v-tec · Hangin' Around Joined: Jul 19, 2009 Posts: 33

nuken wrote:

where was the .dll file stored? on your site or a remote server? How was it included in the post?

edit: Are you using byethost for your webhosting?

i think so the site is on bytehost or one of its resellers called 0fees.net

the text eBayISAPI.dll is a part of ebay link for example

Only registered users can see links on this board!
Get registered or login to the forums!

now if the post contains the word eBayISAPI.dll anywhere on the post either as a part of a link or just on its own.
the post goes all mental and starts redirecting.

but once the text or word eBayISAPI.dll was removed from affected posts , all was ok.
wonder what was causing this anamoly

Susann · Posted: Fri Nov 20, 2009 9:00 am

Scan your PC and search for eBayISAPI.dll there are thousands of Google search results. You should also search for mybookface.net you will find entries from different free host users.

nuken · Posted: Fri Nov 20, 2009 10:17 am

The reason I asked is because bytehost and a few other free webhosts redirect links to mybookface.net by default if the link is either a dead link or if the content it points to is considered against their terms of service. mybookface.net pays them to direct traffic to them and this may be a host issue and not site issue.