TLCA.org - Reported Attack Site! (1 Viewer)

[woody]

Reported Attack Site!

This web site at Toyota Land Cruiser Association has been reported as an attack site and has been blocked based on your security preferences.

Attack sites try to install programs that steal private information, use your computer to attack others, or damage your system.

Some attack sites intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners.

I've had a few folks email me on this...apparrently, TLCA.org has been blacklisted by google and yahoo....

may need to look into this....ads and the site as a whole are 'blocked'

 

[Kaderabek]

Mark was working on it this morning -- thanks for the heads up.

TJK

 

[OlympiaFJ60]

Mark said he has removed all the mallware, now just needs to get relisted with Google.

 

[woody]

FYI, it still happens for me....just an update....

 

[Volunteer]

Same here. Trend micro here at the office keeps notifying me of a agent detected everytime I try to access the site.

Virus Alert!!
JS_AGENT.DAM is detected on CPU-94
Infected file: C:\Documents and Settings\llandry\Local Settings\Temporary Internet Files\Content.IE5\XJKOJT0A\wp-stats[1].htm

 

[woody]

was fixed, now it's back again.....

 

[Volunteer]

I'm not having any problems with it right now

 

[trainrech]

Happening again for me.

 

[TRT2]

I just google'd it and it notes site may harm computer.

 

[66fj40x2]

I just google'd it and it notes site may harm computer.

X2 what give's?????

 

[89s rule]

Still an issue, maybe rover guys are trying to prank us or something?

 

[Mad Jack]

must be rover guys, to do that would be way to complicated for j**p guys.....sorry couldn't resist.

 

[QuebecFJ]

Is this being looked at ? I'd love to renew my subscription but I'm not going to the site as long as my browser tells me it's unsafe.

 

[Trunk Monkey]

The TLCA webmaster, Mark Van Meter, is looking into this. He thought he had it resolved, but it looks like it's still an issue. The issues he's finding are from well before his time, so please be patient while he sorts through stuff. It's kinda like sorting through what your PO did to your rig . . . .

 

[Chef]

From our webmaster:


Hey all,

We had an injection attack on 8/11/2008 and statistics software was
installed using an Iframe for word press. I took care of it right away and
it sounded the alarm at Google. Steps were taken as I have set up this
account with Google's WebMaster tools after the site was hacked in July.
This morning, again, another crawl request was issued to release the warning
and hopefully it will be soon but is out of my control. Next scheduled
auto-sweep of the site is 8/25/2008 according to Google and hope my constant
requests bump it along sooner...it should.

Google's Webmaster tools is a utility I'm using to help monitor and manage
this domain so when something goes awry..I get notified.

TLCA.ORG gets new users registering almost daily and each time someone does
register I have to check it out to see if they are legit or not with no real
way to tell sometimes and have been deleting a lot of users out of WP
because the vulnerability is coming in the comment system installed.

I'm spending time outside of my 15 hours allotment to develop the new Joomla
site and think we can get it online by the end of this month. Easily. When
it does come online, we can put WP away for good and I can start devoting my
hours each month to improving what I have built and grow the site with some
of the ideas we have all talked about. Right now, I feel like it's 1 step
forward and 2 steps back sometimes when so much time has to be spent on
security and dealing with this old site.

Instead of trying to get every little bit of info archived into Joomla, I'm
going to get fresh content up and running, put WP away for good and start
retro adding the older content on the site so we can move forward September
1st with Joomla.

Hope this makes sense...
There are a couple of security things we can take to help alleviate TLCA.ORG
as a target for spammers and they are the following:

1.) Quit using email forwarding and remotely log into web mail for our
emails e.g. webmaster@tlca.org
2.) Move away from the listserver.
3.) Quit using auto responders

These three items listed above are characteristics of malicious/suspicious
spamming sites and even though we are using them for legitimate purposes,
it's attracting a lot of attention from spammers and servers that interact
with our domain.

I think Nick coined the term "hygiene" and addressing these issues, IMO, is
going to be inevitable or we are always going to be a target.

 

[QuebecFJ]

Sounds good, I'll just keep checking until Google crawls the site again.

 

[Chef]

Hey folks,



Persistence pays off. Google has released the warning on the site as of this AM .



tlca - Google Search

 

[QuebecFJ]

Expect a subscription renewal soon