Malware attack
- Pete Eeles
- Administrator & Stock Contributor
- Posts: 6809
- Joined: Tue Jan 17, 2006 6:10 pm
- Location: Thatcham, Berkshire
- Contact:
Malware attack
Many of you will have seen a warning - indicating that UK Butterflies has been attacked, resulting in some modified files.
All files have now been replaced to their original state, all passwords changed, the hosting provider informed, and a request to review the website logged with Google before it is revalidated and considered "safe".
I'll post another message here once I get confirmation that all is well again!
Cheers,
- Pete
All files have now been replaced to their original state, all passwords changed, the hosting provider informed, and a request to review the website logged with Google before it is revalidated and considered "safe".
I'll post another message here once I get confirmation that all is well again!
Cheers,
- Pete
Life Cycles of British & Irish Butterflies: http://www.butterflylifecycles.com
British & Irish Butterflies Rarities: http://www.butterflyrarities.com
British & Irish Butterflies Rarities: http://www.butterflyrarities.com
- Pawpawsaurus
- Posts: 136
- Joined: Thu Aug 26, 2010 10:48 pm
- Location: Hertfordshire
Re: Malware attack
Blimey, you don't hang about, do you?
I saw my first 'Reported Attack' warning this morning. As it seemed persistent, I was about to report it to you. No need now.
Thanks,
Paul
![Smile :)](./images/smilies/icon_smile.gif)
I saw my first 'Reported Attack' warning this morning. As it seemed persistent, I was about to report it to you. No need now.
Thanks,
Paul
- Pete Eeles
- Administrator & Stock Contributor
- Posts: 6809
- Joined: Tue Jan 17, 2006 6:10 pm
- Location: Thatcham, Berkshire
- Contact:
Re: Malware attack
Google has now confirmed that the site is "clean":
"Status of the latest badware review for this site: A review for this site has finished. The site was found clean. The badware warnings from web search are being removed. Please note that it can take some time for this change to propagate."
Thx for your patience!
Cheers,
- Pete
"Status of the latest badware review for this site: A review for this site has finished. The site was found clean. The badware warnings from web search are being removed. Please note that it can take some time for this change to propagate."
Thx for your patience!
Cheers,
- Pete
Life Cycles of British & Irish Butterflies: http://www.butterflylifecycles.com
British & Irish Butterflies Rarities: http://www.butterflyrarities.com
British & Irish Butterflies Rarities: http://www.butterflyrarities.com
Re: Malware attack
When I log in to this site I am being warned that it is insecure, whatever that means. ![Confused :?](./images/smilies/icon_confused.gif)
![Confused :?](./images/smilies/icon_confused.gif)
- Pete Eeles
- Administrator & Stock Contributor
- Posts: 6809
- Joined: Tue Jan 17, 2006 6:10 pm
- Location: Thatcham, Berkshire
- Contact:
Re: Malware attack
Hi Susie - just checked the site over and everything seems OK.
What browser are you using?
Cheers,
- Pete
What browser are you using?
Cheers,
- Pete
Life Cycles of British & Irish Butterflies: http://www.butterflylifecycles.com
British & Irish Butterflies Rarities: http://www.butterflyrarities.com
British & Irish Butterflies Rarities: http://www.butterflyrarities.com
Re: Malware attack
I'm using Internet Explorer 9 and it's still doing it.
- Pete Eeles
- Administrator & Stock Contributor
- Posts: 6809
- Joined: Tue Jan 17, 2006 6:10 pm
- Location: Thatcham, Berkshire
- Contact:
Re: Malware attack
Hmmm. Can't reproduce this. What specific message are you getting (this might allow me to track this down)? Thx!
Anyone else seeing this?
Cheers,
- Pete
Anyone else seeing this?
Cheers,
- Pete
Life Cycles of British & Irish Butterflies: http://www.butterflylifecycles.com
British & Irish Butterflies Rarities: http://www.butterflyrarities.com
British & Irish Butterflies Rarities: http://www.butterflyrarities.com
Re: Malware attack
Hmmm, I am wondering if it is some bug my computer has picked up. When I try to log in a box appears which says warning, the site, UKButterflies.co.uk is insecure blah blah blah about information being provided not being encrypted and gives me three options; to allow, disallow or mark the site as secure. The name rapport appears in the top right hand side of the box.
Anyway, too late to worry about all that stuff now.![Smile :)](./images/smilies/icon_smile.gif)
Anyway, too late to worry about all that stuff now.
![Smile :)](./images/smilies/icon_smile.gif)
Re: Malware attack
Hi Susie,Susie wrote:Anyway, too late to worry about all that stuff now.
if it helps at all - when I log into my work emails from home (I work in a college) I get a similiar message about the college site and our site is fine. So I think it's a bit of bo**ocks really.
![Wink :wink:](./images/smilies/icon_wink.gif)
Michael
- Pawpawsaurus
- Posts: 136
- Joined: Thu Aug 26, 2010 10:48 pm
- Location: Hertfordshire
Re: Malware attack
Susie,Susie wrote:When I try to log in a box appears which says warning, the site, UKButterflies.co.uk is insecure blah blah blah about information being provided not being encrypted and gives me three options; to allow, disallow or mark the site as secure. The name rapport appears in the top right hand side of the box.
Is this:
http://www.trusteer.com/insecure-website-warning
the warning you're seeing? If so, then it looks like a third-party security application which is reporting the supposed risk, rather than malware on your PC.
The 'Products' link at the top of that page explains all. It seems that: "Rapport is a lightweight security software solution that protects web communication between enterprises, such as banks, and their customers and employees."
My guess is that it was told about the recent attack, but doesn't know that all is now well with UKB. There's a 'report this to us' link at the bottom right of the page I've linked to, for reporting safe sites. [Maybe a job for Pete?] The first drop-down box on the form may give you a clue to where this software has come from.
HTH,
Paul
Re: Malware attack
Several Banks promote the Rapport software, to improve security, and provide links to install it, when you set up on-line banking.Susie wrote:The name rapport appears in the top right hand side of the box.
Unfortunately, this software does have side effects and many people have had a lot of problems, at least with the earlier versons. It developed a reputation for slowing your computer down and giving false positives - as you have found. It is quite difficult to remove the software, if you decide to, but you should be able to find instructions on the web.
Mike
Re: Malware attack
Hi all,
Thanks, Michael.
Yes, Paul, that is the message I was seeing. I've clicked on the site being safe so I don't think it will come up again.
Hi Mike. I don't know who added that bit of software as there are quite a few of us who use this computer so I think I will just leave things as they are but I am grateful for the help and advice.
Thanks, Michael.
Yes, Paul, that is the message I was seeing. I've clicked on the site being safe so I don't think it will come up again.
Hi Mike. I don't know who added that bit of software as there are quite a few of us who use this computer so I think I will just leave things as they are but I am grateful for the help and advice.
- Paul Wetton
- Posts: 780
- Joined: Mon Jul 26, 2010 8:07 am
- Contact:
Re: Malware attack
Rapport totally crashed my PC when I loaded it up via my bank account.
It had to be removed using their website if I remember correctly.
It couldn't be removed directly from the PC.
It had to be removed using their website if I remember correctly.
It couldn't be removed directly from the PC.
Cheers Paul
_____________________________________________________________________________
http://www.wildlife-films.com http://www.ibirdz.co.uk
_____________________________________________________________________________
http://www.wildlife-films.com http://www.ibirdz.co.uk