Visiolist Frontpage Virus

proxydesign

proxydesign

Visiolist-Fan
Hello,

When I visisted visiolist.com I got notified about a virus which seems to be from sraphicshouldn.su. Maybe you have included something on visiolist.com from there.

Anyway, screenshot: http://puu.sh/29UbS (in Norwegian)

Free to delete this thread if you want, just to notify you. :)
 
cajkan

cajkan

Active Member
Yes i can confirm this,



Click on Advanced ---> Continue at your own risk for all who want to surf
 
Mark

Mark

Administrator
Staff member
We have removed the injected code, and submitted to webmaster tools. Now we are just waiting for Google to clear our name.

This happened as a result of a trojan that harvests FTP login details, we were first exploited a few weeks ago with this exact same method.... I failed to change the FTP password for this domain, so the problem resurfaced today. The good news is we were only infected for a few minutes, the bad news is Google could take a day or more to remove the warnings.

thanks for your patience, and deeply sorry for the inconvenience
 
proxydesign

proxydesign

Visiolist-Fan
Great job, it's sad when things like this happening. But, may I ask if this attack has infected the screenshot API/server in some way? I am getting an 500 Server error after some minutes with white page/loading.
 
Basti

Basti

Administrator
Staff member
Not that i know off, but iam asking Mark.
Screenshhots have this issue from time to time, server most likely needs a restart
 
Basti

Basti

Administrator
Staff member
Mark said the server is really slow atm, he is rebooting and asking to try rendering again in 15 minutes

EDIT: really slow, better wait for Marks response
 
Basti

Basti

Administrator
Staff member
Hacker identified as 217.172.130.163 thanks to Mark
For anyone who want to take the precaution, can add this into their webserver blacklist. We will try and watch over this issue and hopefully its a static ip
 
Mark

Mark

Administrator
Staff member
Just to clarify, this hack was NOT the result of a code exploit in VisioList.

screenshot server has been rebooted, screenshots are rendering normal.
 
Anna

Anna

Member
Doubt this has something with above to do, but felt it unnecessary to start a new topic about it. My password to this site have been reset/changed two times now so I cant get access to the forum. And no, I have nothing to do with it! It is easily fixed by sending a reset request. But it is really annoying. :S What is going on.....`?
 
Mark

Mark

Administrator
Staff member
we moved to a new members system

http://visiolist.com/members/

which bridges our forum and licensing system into 1 database.

I emailed everyone notifying/warning them that you must reset your password (only once though...) because we could not import encrypted passwords from the forum into the new system :)
 
Anna

Anna

Member
Oh, have ben very busy lately so I missed your email. And this was from two different computors. Can thats be it?
 
Mark

Mark

Administrator
Staff member
Anna said:
Oh, have ben very busy lately so I missed your email. And this was from two different computors. Can thats be it?
Click to expand...
your computer doesnt matter, we made a major change on our server.
 
Mark

Mark

Administrator
Staff member
the problem was resolved yesterday after only a few minutes, can you provide any more information?


the site is still showing clear for me from all available checks I can run
 
Mark

Mark

Administrator
Staff member
thanks, I have requested a review again via Google webmaster tools.
 
You must log in or register to reply here.
Top