I think there might be a virus problem :(

[I, Brian]

I believe I've found the sources of the malicious code, and I've disabled these from the template so that even if hacked again, they will not be called up by the site.

However, I've got a sys admin friend who is going to go through the server tonight and tomorrow and track down how this exploit occured, and ensure we can remove and protect against it in future.

Hopefully we have some breathing room until them, by which time I expect to get this issue closed down so it can't happen again.

[Gary Compton]

You know what it is Bryan; I've just been chatting with my Iranian friend, A S Besham.

And the fact is without this site, I'd not be able to do this. I've even learnt an Iranian sentence tonight, so well done for keeping this place open for business.

Good job, as Trump would say; bloody good job, as Lord Sugar would say.

It must've been a nightmare seeing all that Google red and minus signs.

Many thanks for your efforts.

[mosaix]

For those of you using Firefox, the problem can be circumvented by turning off "Block Reported Attack Sites" in the security tab of 'Options' under 'Tools'.

Of course, turn it on again before visiting any sites other than Chrons.

[thaddeus6th]

I have returned! I also got the "Here there be viruses" sign and haven't been on for a day or so.

Glad the problem seems to be cleared up, I didn't get the virus message when I clicked today. Thanks for resolving it, Brian.

[I, Brian]

Google is now confirming the site as clean, but if you do receive a virus warning, please do refresh your cache.

[The Judge]

Originally Posted by mosaix

For those of you using Firefox, the problem can be circumvented by turning off "Block Reported Attack Sites" in the security tab of 'Options' under 'Tools'.

Of course, turn it on again before visiting any sites other than Chrons.

I just wanted to thank you, mosaix -- after you'd posted yesterday and commented about disabling the warnings, I managed to work out how to do it (me! Techno-idiot!!) which prevented me self-combusting through frustration!

And no warnings this morning -- so Google have moved more quickly to confirm things than I expected them to do.

[Ursa major]

After multiple goes at cache-clearing and even restarting my laptop, I'm still getting the alert from Norton. Either my machine has been infected or the Chrons isn't as clean as we all would hope.

I'll try again tomorrow....

[Dave]

Brian - I asked StopBadware.org to do an independent review last night. And they have come back to me during the night and said the site is now clean. That may be why the Firefox warnings have stopped a little quicker. I explained the problem to them, that it had been repaired, and that you had already asked Google to review. I told them that the warnings were now more annoying than the malware itself was.

[Dave]

Originally Posted by Ursa major

After multiple goes at cache-clearing and even restarting my laptop, I'm still getting the alert from Norton. Either my machine has been infected or the Chrons isn't as clean as we all would hope..

Sorry, but I can't help there. I'm finally free of all warnings.

Update all your anti-malware programs to the latest versions and then run them again. Do you use ccleaner? That will clear out all your old junk for you.

If you don't have any anti-malware programs there are plenty of free ones: spywareblaster, spybot: search and destroy, super antispyware. Those will immunise you against threats rather than finding and cleaning them after the event.

[I, Brian]

Cheers, Dave - I've got someone looking into the server backend to locate the original source of the infection so we can nuke it. In the meantime, it looks like I've managed to isolate the original problem to stop it infecting chronicles, but I'll keep some features here limited until I'm confident this has been fully dealt with.

[mosaix]

Originally Posted by The Judge

I just wanted to thank you, mosaix -- after you'd posted yesterday and commented about disabling the warnings, I managed to work out how to do it (me! Techno-idiot!!) which prevented me self-combusting through frustration!

And no warnings this morning -- so Google have moved more quickly to confirm things than I expected them to do.

Happy to help, Judge. I've restored my 'warnings' this morning and not received any messages, so fingers crossed.

[Ursa major]

After doing a full virus scan, I came back.

At first, I got no alert, but then I changed the view to the one I normally use: "chronicles-network all users". An alert. I get the same with "chronicles-network forum main". Changing back to "sffchronicles" solves the problem for me.

For the time being, I'll stick to this view (although I prefer a view that fill the width of the window size I use).


I hope this information will allow Brian to root out any remaining signs of infection.

[mosaix]

Just switched to your preferred view, UM and not getting any problems with it. I use Firefox.

[Ursa major]

I use IE8.

Anyway, I'm sticking to the "sffchronicles" view for the moment. (It's just good to be back. )

[RJM Corbet]

All clear now. Suggest that people e mail members on their 'friends' list -- who can e mail others ...