Malware on C2 uk site ?

mikvan52 · Post by **mikvan52** » February 11th, 2013, 3:37 pm

A warning showed up today that the uk site is compromised. Would someone post a msg. here alerting us as to the danger?

= thanks

••• please let us know when the danger is over....

Bob S. · Post by **Bob S.** » February 11th, 2013, 11:50 pm

mikvan52 wrote:A warning showed up today that the uk site is compromised. Would someone post a msg. here alerting us as to the danger?

= thanks

••• please let us know when the danger is over....

Mike,

I also posted a message about that - on this forum. I see that I was just a minute ahead of you, so that is why you didn't see it beforehand. I also sent PM to Dougie, who is a monitor on both forums, so he should be up on what is (or, hopefully was) going on. I haven't got around to checking it out yet this evening. With luck, it may already be over

Bob S.

Bob S. · Post by **Bob S.** » February 11th, 2013, 11:55 pm

Bob S. wrote:
mikvan52 wrote:A warning showed up today that the uk site is compromised. Would someone post a msg. here alerting us as to the danger?

= thanks

••• please let us know when the danger is over....
Mike,

I also posted a message about that - on this forum. I see that I was just a minute ahead of you, so that is why you didn't see it beforehand. I also sent PM to Dougie, who is a monitor on both forums, so he should be up on what is (or, hopefully was) going on. I haven't got around to checking it out yet this evening. With luck, it may already be over

Bob S.

Just checked. No change.

For those US forum members that have not looked at the UK forum today, this is what you get:

: Screen shot 2013-02-11 at 7.51.19 PM.png (41.02 KiB) Viewed 8396 times

A bit on the scary side.

Hey Dougie! Can it happen here???

Bob S.

Howard N · Post by **Howard N** » February 12th, 2013, 2:37 am

The British *** DELETE - SPAM *** salesmen were more dangerous than it first appeared.

Who knew?

PaulH · Post by **PaulH** » February 12th, 2013, 2:59 am

I've emailed David, who is in chart of both forums, though I'm guessing he already knew.

Citroen · Post by **Citroen** » February 12th, 2013, 8:38 am

It was the result of a PHPBB3 SQL injection attack. It's been cleaned up now.

Bob S. · Post by **Bob S.** » February 12th, 2013, 8:38 am

Howard N wrote:The British *** DELETE - SPAM *** salesmen were more dangerous than it first appeared.

Who knew?

That was my errant thought as well.

Bob S.

NavigationHazard · Post by **NavigationHazard** » February 12th, 2013, 12:05 pm

I'm still getting the malware message in Chrome....

Citroen · Post by **Citroen** » February 12th, 2013, 12:58 pm

NavigationHazard wrote:I'm still getting the malware message in Chrome....

C2UK (in the guise of Andy McCorkell) says they've cleaned it up and are just waiting for the virus scanner's robots to reassess the site. So it should be safe to bypass the warning messages.
I've had a quick scan of the HTML and the only offsite URLs contained in it are legitimate links to the C2 UK Shop and the to C2 USA online ranking system.

Bob S. · Post by **Bob S.** » February 12th, 2013, 4:55 pm

Citroen wrote:
NavigationHazard wrote:I'm still getting the malware message in Chrome....
C2UK (in the guise of Andy McCorkell) says they've cleaned it up and are just waiting for the virus scanner's robots to reassess the site. So it should be safe to bypass the warning messages.
I've had a quick scan of the HTML and the only offsite URLs contained in it are legitimate links to the C2 UK Shop and the to C2 USA online ranking system.

Legitimate? For the most part - at least we hope so. But it has certainly been challenged often enough. Of course, the link to it is a different matter. I guess I can't quibble with that being called legitimate.

Bob S.

mikvan52 · Post by **mikvan52** » February 12th, 2013, 9:19 pm

I am ignorant in these matters...

What does it take to get rid of the warning?

Bob S. · Post by **Bob S.** » February 12th, 2013, 11:27 pm

mikvan52 wrote:I am ignorant in these matters...

What does it take to get rid of the warning?

So am I, but my impression is that it is just a matter of patience. Easy for me to say, since I haven't posted a blog entry for many months. I realize that you post fairly regularly, whereas I just look at the new regular posts on the Board index to see if something there catches my interest.

Bob S.

Citroen · Post by **Citroen** » February 13th, 2013, 3:57 am

Wait.

C2 UK are going to upgrade the forum software.
They've cleaned the crap off the site.
Google and Kapersky and other will come along and scan it soon and mark it clean.

So by Monday it should be good to go.

Ralph Earle · Post by **Ralph Earle** » July 29th, 2013, 2:16 pm

UK site currently prompts a warning from Foxfire:

Reported Attack Page!

This web page at concept2.co.uk has been reported as an attack page and has been blocked based on your security preferences.

Attack pages try to install programs that steal private information, use your computer to attack others, or damage your system.Some attack pages intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners.

Citroen · Post by **Citroen** » July 29th, 2013, 2:20 pm

The crap on there has been cleaned up. It's just a case of waiting for the web crawlers to detect it.

Should be OK by 1st August.

Concept2 Forum

Malware on C2 uk site ?

Malware on C2 uk site ?

Re: Malware on C2 uk site ?

Re: Malware on C2 uk site ?

Re: Malware on C2 uk site ?

Re: Malware on C2 uk site ?

Re: Malware on C2 uk site ?

Re: Malware on C2 uk site ?

Re: Malware on C2 uk site ?

Re: Malware on C2 uk site ?

Re: Malware on C2 uk site ?

Re: Malware on C2 uk site ?

Re: Malware on C2 uk site ?

Re: Malware on C2 uk site ?

Re: Malware on C2 uk site ?

Re: Malware on C2 uk site ?