# Malware(?) redirects from SDMB

**URL:** <https://boards.straightdope.com/t/malware-redirects-from-sdmb/685501>\
**Category:** About This Message Board\
**Created:** [April 6, 2014, 8:24pm UTC](https://boards.straightdope.com/t/malware-redirects-from-sdmb/685501 "2014-04-06T20:24:20Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![jjimm](https://avatars.discourse-cdn.com/v4/letter/j/ba8739/32.png) [@jjimm](https://boards.straightdope.com/u/jjimm)\
**Post date:** [April 6, 2014, 8:24pm UTC](https://boards.straightdope.com/t/malware-redirects-from-sdmb/685501/1 "2014-04-06T20:24:20Z")

</div>

Per requests in the malware sticky:

1. I just got hit by a redirect to “upgradienk”. This follows several redirects over a few days to bullshit ‘upgrade your Java’ sites that I thought were coming from my machine, but in retrospect were coming from here as they were only ever from SDMB pages, and I subsequently came up clean after deep scans with MalwareBytes, SpyHunter and MSE (going to check with Sophos rootkit checker and will report back if that was the problem).

URL: (truncated)

[http://www.upgradienk.com/IT/index.php?dv1=10924150&dv2=06143&dv3=IT&dv4=06143-IT&sec\_id=qWJ8vBQjIEzEzreUD3KHv3HjvTekD38jf3bR7ks372CQYk8EPBv8PM��&marketing\_fid=MTM5NjgxNTA5NS05YTkzZDAyMjgwOGY2ZmZhY2FiNzU1ZDM4NDcwNzMwNw](http://www.upgradienk.com/IT/index.php?dv1=10924150&dv2=06143&dv3=IT&dv4=06143-IT&sec_id=qWJ8vBQjIEzEzreUD3KHv3HjvTekD38jf3bR7ks372CQYk8EPBv8PM%EB%EB&marketing_fid=MTM5NjgxNTA5NS05YTkzZDAyMjgwOGY2ZmZhY2FiNzU1ZDM4NDcwNzMwNw)

1. Time of occurence: GMT+2 22.15. Location: Italy. Windows 7 (up-to-date SPs). Chrome version 33.0.1750.154. Running MSE.

2. SDMB page.

3. No screenshot, sorry. Added info though, [at least one other board seems to have been hit by the same thing](http://support.proboards.com/thread/507288/www-upgradienk-com?page=1&scrollTo=5804478) today.

---

<div class="post-metadata">

**Author:** ![vd](https://avatars.discourse-cdn.com/v4/letter/v/b19c9b/32.png) [@vd](https://boards.straightdope.com/u/vd)\
**Post date:** [April 7, 2014, 12:41pm UTC](https://boards.straightdope.com/t/malware-redirects-from-sdmb/685501/2 "2014-04-07T12:41:28Z")

</div>

I’m getting these this morning.

As a workaround, turning off JavaScript seems to stop it.

---

<div class="post-metadata">

**Author:** ![TubaDiva](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tubadiva/32/507_2.png) [@TubaDiva](https://boards.straightdope.com/u/TubaDiva)\
**Post date:** [April 7, 2014, 1:49pm UTC](https://boards.straightdope.com/t/malware-redirects-from-sdmb/685501/3 "2014-04-07T13:49:09Z")

</div>

I’ll send this on upstairs. Sorry this happened.

---

<div class="post-metadata">

**Author:** ![jjimm](https://avatars.discourse-cdn.com/v4/letter/j/ba8739/32.png) [@jjimm](https://boards.straightdope.com/u/jjimm)\
**Post date:** [April 7, 2014, 1:59pm UTC](https://boards.straightdope.com/t/malware-redirects-from-sdmb/685501/4 "2014-04-07T13:59:40Z")

</div>

It’s no biggie for me, just wanted to let you know.