Home > Forum > Categories > Random Tracks > Malware Warnings on TRs

Malware Warnings on TRs

  • Charlie Hagedorn
  • User
  • User
More
13 years 11 months ago #204084 by Charlie Hagedorn
Replied by Charlie Hagedorn on topic Re: Malware Warnings on TRs
Chrome is only getting hits on a small fraction of the URLs. I'm not sure how the Google Safe Browsing servers decide that a site is a source for malware, but they surely have some latency.

Hope this isn't hitting your day job hard, Marcus! Any TAYers with some modern site admin experience may be of considerable help with rooting out the trouble....

Please Log in or Create an account to join the conversation.

  • Marcus
  • Topic Author
  • User
  • User
More
13 years 11 months ago #204085 by Marcus
Replied by Marcus on topic Re: Malware Warnings on TRs
Good info, thanks -- I'm still trying to root out the pieces.  Hopefully I can get it all cleaned out. I'm getting some help from TAY folks via email, thank you very much!

Please Log in or Create an account to join the conversation.

  • Marcus
  • Topic Author
  • User
  • User
More
13 years 11 months ago #204086 by Marcus
Replied by Marcus on topic Re: Malware Warnings on TRs
Huge help from JF, TAY lurker extraordinaire -- I think we've cleaned out most of the malware for now, but we'll keep an eye on it to see if it resurfaces.

Please Log in or Create an account to join the conversation.

  • mc
  • User
  • User
More
13 years 11 months ago #204103 by mc
Replied by mc on topic Re: Malware Warnings on TRs
thanks for jumping on that so quick. pretty soon after my initial post it was cleared up on IE7...

Please Log in or Create an account to join the conversation.

  • Amar Andalkar
  • User
  • User
More
13 years 11 months ago #204112 by Amar Andalkar
Replied by Amar Andalkar on topic Re: Malware Warnings on TRs
It looks like the TAY clock-error problem has also been fixed -- the displayed time on each page had been over 8 minutes fast recently, but is now correct.

Did you do something to fix it while dealing with the malware? Or did it just fix itself?

Please Log in or Create an account to join the conversation.

  • Marcus
  • Topic Author
  • User
  • User
More
13 years 11 months ago #204119 by Marcus
Replied by Marcus on topic Re: Malware Warnings on TRs
I noticed the clock corrected itself when I replaced one of the first php files that was infected -- I had thought that clock was server-side and I had no way to change it. Still not sure if I do, but something fixed it. :) I knew that would make you happy Amar!

TAY's hosting service was hacked and lost a bunch of SSH login/password info a few weeks ago. They were pretty quick to force password resets, but I'm guessing that short window was when somebody got onto the TAY server and put this trojan in. Seems plausible.

Please Log in or Create an account to join the conversation.