Dodgy and suspicous site, Keywebtracker

Hi,

This sounds to me like standard tricky to get hits on a variety of sites.  They poison the Google results pages with results which when clicked on send you to a variety of different sites.  You can think of the back.php site as just a random site picker from probably a long list of sites.  It passes key words it seems (note the kw parameter, more than likely stands for "key words") so if the randomly picked has the ability to search it passes them on to make it more likely to generate content you're interested in clicking on.   Of course there is potential that some of the sites redirected to may well be infected malware but that is always a risk when visiting any site these days.

I would be highly confident that the symptoms you have described are nothing to do with anything malicious on your machine.

Hope that helps.

Regards,

Jak 

Thanks, to be sure, I started a sophos scan last night, When I woke up this morning, it found nothing bad.

Hello James652,

please see Malware Infected Website on how to report a suspicious website. But if it "just" serves ads it might not be classified as malicious.

Christian

Hi I did a google search and found this discussion. The website actually says on it's front page

"auto tracker //Congratulation!!! You're BOT! Thank you! Bye "

So is my computer a 'bot' now? I've tried running malwarebytes and it found nothing. It definitely sounds like this is installing something on people's computers. Any ideas?

@frustrated

Its definatly some wierd site. I went there with google chrome and Sophos Endpoint security 9.5, And neither of them said " Hey this looks suspicous" 

The apparent company is german, So maybe they had to do a translation from german to english and it came out like that. It could be saying something like " Hi, we think you are a bot, goodbye"

Yet, it does seems like the site was intended to install stuff onto peoples computer, as soon as I clicked away from the site, I looked into task manager and found nothing.

I have sent this site to sophos for examination, I'll post here on what they reply saying.

Hi, Sophos had replied with this.

Hello,

Thank you for your sample submission and contacting Sophos Technical Support.

The result of the sample was as follows:

back[1] => not detect-worthy

Nothing malicious from the code

Appears to be a website and cookie\ad experiment

Hello frustrated,

it delivers nothing but this text, so no need to worry.

BOT in this context might could mean robot (aka spider, crawler, ...) - i.e. it could be just meaningless content in response to a search program hitting the root directory - or intentionally directed at nosy types (see the urban DICTIONARY for other meanings of bot)  :smileywink: .  

While it is annoying (and perhaps embarrassing) neither the site nor the ones it redirects seem to be malicious.

Christian