Page Index Toggle Pages: 1 [2] 
Topic Tools
Hot Topic (More than 10 Replies) Google says yabbforum.com is an attacking website (Read 5,909 times)
Derek Bullock
Ex Member


Re: Google says yabbforum.com is an attacking website
Reply #15 - Feb 16th, 2013 at 4:16am
Post Tools
A  web query through http://urlquery.net is also detecting some abnormalities

http://urlquery.net/report.php?id=1013857

« Last Edit: Feb 16th, 2013 at 4:23am by »  
Back to top
 
IP Logged
 
JonB
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 3,913
Location: Land of the Blazing Sun!

YaBB 2.6.1
Re: Google says yabbforum.com is an attacking website
Reply #16 - Feb 16th, 2013 at 4:44am
Post Tools
It is only too bad I do not live in London. The problem would be resolved.

Wink
  

I find your lack of faith disturbing.
Back to top
IP Logged
 
JonB
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 3,913
Location: Land of the Blazing Sun!

YaBB 2.6.1
Re: Google says yabbforum.com is an attacking website
Reply #17 - Feb 20th, 2013 at 7:14pm
Post Tools
OK, we seem to have weathered the crisis.

A. I made as many changes as I can to reduce the possibility of 're-infection' (although that is not really a correct term).  But for the average user it is close enough. It may be the changes I have made are adequate, but as I don't know how everything was provisioned, and whom has/had access, that is very difficult to say '100% for sure'.

I should emphasize what really happened - some PHP pages and script URL's were altered.  The altered files 'pointed to' sites that harbored malware.  There was never a single malware item on YaBB's servers or on any YaBB admin's server install - only pointers.  What AV's and website safety checks were 'hollering about' was the URL patterns of the pointers (they were associated with malware). SO, if you put one of those addresses into a browser, you should run a malware scan.

B. I'm going to discuss some changes with Corey that I think might make us generally less vulnerable. These are structural, not technical.

Thanks to everyone for your continued support of YaBB

Smiley  

Edited:
I stand - somewhat - corrected: this is there is still a hole.
However I have cleansed the site YET AGAIN.

from Google Webmaster tools:
Status of the latest badware review for this site: A review for this site has finished. The site was found clean. The badware warnings from web search are being removed. Please note that it can take some time for this change to propagate.
Sample of URLs with malware

I have preserved the evidence intact this time. Let teh chips fall where they may.


« Last Edit: Feb 21st, 2013 at 12:18am by JonB »  

I find your lack of faith disturbing.
Back to top
IP Logged
 
Derek Bullock
Ex Member


Re: Google says yabbforum.com is an attacking website
Reply #18 - Feb 21st, 2013 at 1:56am
Post Tools
Maybe send someone from Mossad.  (Take no prisoners)  Grin Grin Grin Grin
  
Back to top
 
IP Logged
 
JonB
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 3,913
Location: Land of the Blazing Sun!

YaBB 2.6.1
Re: Google says yabbforum.com is an attacking website
Reply #19 - Feb 21st, 2013 at 6:42am
Post Tools
Quote:
Maybe send someone from Mossad


those folks do a great job, LOL  Smiley

I think they are out of our budget range however. (still my idea of a good solution)

Smiley
  

I find your lack of faith disturbing.
Back to top
IP Logged
 
JonB
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline



Posts: 3,913
Location: Land of the Blazing Sun!

YaBB 2.6.1
Re: Google says yabbforum.com is an attacking website
Reply #20 - Feb 23rd, 2013 at 1:35pm
Post Tools
Just now (~ 1300 GMT) I reloaded all clean code, and changed all the users/PW's (including the server 'admin').  I hesitated to do that, as temporarily at least I have become the 'sole gaurdian'.  However, I spoke with Dandello last nite and we agreed there was not much else we could do.

After I made the changes I as able to get yabbforum.com running again and I am able to run the server's "control panel" and use FTP.

Let's all hope this will bring this plague to and end (in part because I have no more cards to play)

Thanks
Smiley.
  

I find your lack of faith disturbing.
Back to top
IP Logged
 
Vikash Kumar munda
YaBB Newcomer
*
Offline



Posts: 16
Re: Google says yabbforum.com is an attacking website
Reply #21 - Oct 14th, 2013 at 7:05am
Post Tools
Homer J. S. wrote on Feb 14th, 2013 at 4:47pm:
Today when I visited yabbforum.com I got a big red warning saying that this site is listed as an attacking one. This happened never before here. Perhaps the code should be checked?


This kind of message generally displayed when a website is compromised by hackers when the problem will be resolved message will automatically disappear.
  
Back to top
 
IP Logged
 
Page Index Toggle Pages: 1 [2] 
Topic Tools
Bookmarks: del.icio.us Digg Facebook Google Google+ Linked in reddit StumbleUpon Twitter Yahoo
 
  « Board Index ‹ Board  ^Top