I spoke too soon. It happened to me today using Chrome.
Redirection of forum.nanfa.org url POSSIBLE MALWARE PROBLEM. PLEASE READ THREAD AND PROTECT YOURSELF!
Started by
Guest_Erica Lyons_*
, Dec 31 2013 01:47 PM
72 replies to this topic
#63
magic-carpet
-
- Administrators
Posted 22 February 2015 - 06:30 PM
Hi Forum Users,
First of all, I apologize for the delay in addressing this. I was traveling all of last week, without necessary tools and access to address the issue.
Apparently, the forum upgrade did NOT fix the malware issue. I will report the issue to the folks at IPB who provide us with the forum software. The Malware which causes redirection had morphed and changed its signature. I have found the new malware variant and fixed the issue manually.
It is quite likely that we will see this happen again, until IPB fixes the root cause which allows this malware to get injected into the skin caches.
I think I got all files clean now. Please do let me know if this happens again.
Thanks
Sajjad
First of all, I apologize for the delay in addressing this. I was traveling all of last week, without necessary tools and access to address the issue.
Apparently, the forum upgrade did NOT fix the malware issue. I will report the issue to the folks at IPB who provide us with the forum software. The Malware which causes redirection had morphed and changed its signature. I have found the new malware variant and fixed the issue manually.
It is quite likely that we will see this happen again, until IPB fixes the root cause which allows this malware to get injected into the skin caches.
I think I got all files clean now. Please do let me know if this happens again.
Thanks
Sajjad
#64
Isaac Szabo
-
- NANFA Member
- Marble Falls, AR
Posted 22 February 2015 - 06:41 PM
Yes, it really seems to be fixed. I had figured out a method that produced the redirect every time (clearing browsing data and then clicking on a google link to the forum), but I no longer get the redirect when doing that. Thanks for your work in fixing this Sajjad! We are lucky to have you!
#65
Matt DeLaVega
-
- Forum Staff
- Ohio
Posted 22 February 2015 - 06:50 PM
Amen. Thank you Sajjad.
Evryone else, keep your eyes open, and let us know right away if we have an issue. Many of us who commonly come here via bookmark do not run into this problem. Thanks all.
Evryone else, keep your eyes open, and let us know right away if we have an issue. Many of us who commonly come here via bookmark do not run into this problem. Thanks all.
The member formerly known as Skipjack
#67
mattknepley
-
- NANFA Member
- Smack-dab between the Savannah and the Saluda.
Posted 22 February 2015 - 09:23 PM
Yes, thank you! But in all seriousness, for the first time ever I now have various text throughout the forum and NANFA homepage highlighted in blue and double underlined which offers a link to a coupon purchasing site.
No good deed goes unpunished, Sajjad.
No good deed goes unpunished, Sajjad.
Matt Knepley
"No thanks, a third of a gopher would merely arouse my appetite..."
"No thanks, a third of a gopher would merely arouse my appetite..."
#68
Michael Wolfe
-
- Board of Directors
-
- North Georgia, Oconee River Drainage
Posted 22 February 2015 - 09:28 PM
If it is happening here and on the webpage, then I am afraid it might be you? The malware thing was part of a forum bug.
Either write something worth reading or do something worth writing. - Benjamin Franklin
#69
mattknepley
-
- NANFA Member
- Smack-dab between the Savannah and the Saluda.
Posted 23 February 2015 - 06:20 AM
Grrr. And now I'm getting a Mr. Clean commercial. Methinks you are correct, Michael. Now to just find the vile thing and kill it.If it is happening here and on the webpage, then I am afraid it might be you? The malware thing was part of a forum bug.
Matt Knepley
"No thanks, a third of a gopher would merely arouse my appetite..."
"No thanks, a third of a gopher would merely arouse my appetite..."
#71
FirstChAoS
-
- Regional Rep
-
Posted 25 February 2015 - 10:08 AM
Redirect returned. Just saw it on entering in my iPads Google ap.
Also noticed something odd yesterday. When signing in at lunch break (6:30 pm EST) on the computer kiosks at work I kept getting a invalid name or password error. It worked fine at the 9:00 break.
Also noticed something odd yesterday. When signing in at lunch break (6:30 pm EST) on the computer kiosks at work I kept getting a invalid name or password error. It worked fine at the 9:00 break.
#72
Matt DeLaVega
-
- Forum Staff
- Ohio
Posted 25 February 2015 - 07:40 PM
Sajjad is working on this again. It is our forum host IPB that is having some trouble solving this. All we can do is keep blocking, and changing smart internet stuff and things like that and some other stuff until they get the stuff and things fixed. Make sense?
The member formerly known as Skipjack
#73
Michael Wolfe
-
- Board of Directors
-
- North Georgia, Oconee River Drainage
Posted 25 February 2015 - 08:02 PM
The other thing we can all do is make sure that we clear the cache of the machine we are using so that it loads the latest incarnation of the forum, and dump the browser history and stuff like that every once in a while.
Either write something worth reading or do something worth writing. - Benjamin Franklin
Reply to this topic
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users
NANFA Youtube Channel 
