• Our new ticketing site is now live! Using either this or the original site (both powered by TrainSplit) helps support the running of the forum with every ticket purchase! Find out more and ask any questions/give us feedback in this thread!

Virus Warning Accessing This Forum

Status
Not open for further replies.
Y

yorkie

Forum Staff
Staff Member
Administrator
Joined
6 Jun 2005
Messages
78,249
Location
Yorkshire
I strongly recommend considering using a hosts file to block the offending domains (see posts #50 and #59) if possible (ie, if using a PC you own at home). If you do this, then your computer will never see any of the malicious code, regardless of where it is linked from or where it links to.

Obviously you should also ensure your browser and operating system is fully up-to-date with all the latest updates installed.

The estimate for this issue being resolved has now slipped to tomorrow afternoon unfortunately.
 
Last edited:
Sponsor Post - registered members do not see these adverts; click here to register, or click here to log in
R

RailUK Forums

C

Clip

Established Member
Joined
28 Jun 2010
Messages
10,821
This is the page that shows up (if like me you dont have anything to block it) And it also logs you out all the time once your logged in so careful out there.

if you havent already download Malwarebytes/update it then do a full scan just to be sure..

Hope you can sort it out soon though folks.
 

Attachments

  • RailUK Forums.JPG
    RailUK Forums.JPG
    293 KB · Views: 49
causton

causton

Established Member
Joined
4 Aug 2010
Messages
5,504
Location
Somewhere between WY372 and MV7
Clip said:
This is the page that shows up (if like me you dont have anything to block it) And it also logs you out all the time once your logged in so careful out there.

if you havent already download Malwarebytes/update it then do a full scan just to be sure..

Hope you can sort it out soon though folks.
Click to expand...

In future, I believe alt-printscreen works better than scribbling over 'Confidential Information' in the taskbar! ;)

...at the moment I can't get onto the site via www. and have to just go to http://railforums.co.uk/ ...!
 
B

bAzTNM

Member
Joined
17 May 2011
Messages
342
Yeah, I'm getting a warning too. I'm using Firefox and every time I go to the forum, I'm getting a big red warning screen appear on my screen.
 
Mike395

Mike395

Forum Staff
Staff Member
Administrator
Joined
23 May 2009
Messages
3,380
Location
Bedford
Good morning :)

Just so you all know, the issue has now been fixed. It may take up to 48 hours for the forum to be removed from the infected sites database on Google, so people may still be receiving warnings in the short term.
 
newbie babs

newbie babs

Member
Joined
16 Jul 2011
Messages
633
Location
Sheffield
I can only get on from work, which is why I am posting.

No one can get on from home, the google warning comes up with malware issues, not even from out mobiles can we get on and we all have different providers.
 
Crossover

Crossover

Established Member
Joined
4 Jun 2009
Messages
9,493
Location
Yorkshire
Mike395 said:
Good morning :)

Just so you all know, the issue has now been fixed. It may take up to 48 hours for the forum to be removed from the infected sites database on Google, so people may still be receiving warnings in the short term.
Click to expand...

Great news :D

newbie babs said:
I can only get on from work, which is why I am posting.

No one can get on from home, the google warning comes up with malware issues, not even from out mobiles can we get on and we all have different providers.
Click to expand...

If you visit the non-www. version of RUK, it works fine (although long term, I know the staff won't want us doing this as it isn't designed to work this way and as a result some areas of the site don't actually work) - the non-www. version doesn't appear to have been marked as a malware site :)
 
Madge Wildfire

Madge Wildfire

Member
Joined
9 Apr 2011
Messages
317
Location
Over there
Mike395 said:
Good morning :)

Just so you all know, the issue has now been fixed. It may take up to 48 hours for the forum to be removed from the infected sites database on Google, so people may still be receiving warnings in the short term.
Click to expand...

Excellent that everything is sorted, and it is working fine for me now. :)
 
466.networkers

466.networkers

Member
Joined
8 Dec 2006
Messages
961
Location
Costa Del Sheppey
I'm back!

Google Chrome said there was something nasty on here, and stopped me from accessing the site.

AVG said nothing too as Chrome hadn't actually seen the ads.

All working fine here now. Well done to all involved to fixing the problem! :)
 
Ivo

Ivo

Established Member
Joined
8 Jan 2010
Messages
7,307
Location
Bath (or Southend)
Mike395 said:
Good morning :)

Just so you all know, the issue has now been fixed. It may take up to 48 hours for the forum to be removed from the infected sites database on Google, so people may still be receiving warnings in the short term.
Click to expand...

Well done all involved, and thank you :smile:
 
General Zod

General Zod

Member
Joined
5 Jan 2008
Messages
590
I use Linux and FF9 and did have the Google malicious site warning. Everything seemed to be OK by yesterday lunchtime. Do any other *.nix users have any annoyoing problems to report ?
 
S

Statto

Established Member
Joined
8 Feb 2011
Messages
4,065
Location
At home or at the pub
Yippe i can log back in, when i went to click, This isn't an attack site, i kept getting linked to Stop Badware site. It wouldn't let me log in to this site either.
 
WestCoast

WestCoast

Established Member
Joined
19 Jun 2010
Messages
5,665
Location
South Yorkshire
I see that a freelancer had to be used to solve the problem (from the advert on peopleperhour.com), I am glad they solved it quickly.
 
Mike395

Mike395

Forum Staff
Staff Member
Administrator
Joined
23 May 2009
Messages
3,380
Location
Bedford
Basically, the issue was that a weak point (which has now been strengthened) in our security compromised the forum - there is now little chance of it happening again, you will be pleased to hear.

We elected to use a freelancer primarily due to speed - whilst some of the forum team are able to code in the language the forum software is built in, we don't have the specialist experience needed to close security holes quickly. :)
 
Ivo

Ivo

Established Member
Joined
8 Jan 2010
Messages
7,307
Location
Bath (or Southend)
Mike395 said:
Basically, the issue was that a weak point (which has now been strengthened) in our security compromised the forum - there is now little chance of it happening again, you will be pleased to hear.

We elected to use a freelancer primarily due to speed - whilst some of the forum team are able to code in the language the forum software is built in, we don't have the specialist experience needed to close security holes quickly. :)
Click to expand...

So presumably this would explain why there was a new user with administrative capabilities named "Temp Admin" last night?
 
Status
Not open for further replies.

Top