Jack_O'neill Posted January 25, 2011 Posted January 25, 2011 screen shot from just a couple minutes ago. the "ok" in the green circle is Norton saying the site is safe, even though google says it might not be. Quote
CADTutor Posted January 25, 2011 Posted January 25, 2011 We're still on the list at the time of writing. Are you using a different browser? IE won't show a warning unless you have web security software installed. FF and Chrome will as standard. Quote
Jack_O'neill Posted January 25, 2011 Posted January 25, 2011 I'm using IE8. The posted screen shot is what I see if I go to Google's home page and do a search for "cadtutor". Quote
dbroada Posted January 25, 2011 Posted January 25, 2011 tried about an hour ago and was still getting the warning. I am pleased to announce that I have just logged on without the warning message (Firefox) Quote
CADTutor Posted January 25, 2011 Posted January 25, 2011 Yep, I can now view the site with both FF and Chrome without security warnings being displayed but it's still showing in the search listings. One step at a time - deep breath Quote
nestly Posted January 25, 2011 Posted January 25, 2011 Yep, I've turned Attack Site blocking on again, and all seems well. Quote
Cad64 Posted January 25, 2011 Posted January 25, 2011 Right after I posted my last message in this thread, I tried to get back to the main forum and got hit with the warning again. I've only just now got back on. Also using Firefox. It seems to be intermittent? Quote
tzframpton Posted January 25, 2011 Posted January 25, 2011 I've just been using IE for now until it's fixed. Quote
CADTutor Posted January 25, 2011 Posted January 25, 2011 Warning messages have now been removed from Google search listings. Thanks to everyone who helped with information about this incident. I've done a lot of work cleaning things up and reviewing security but I would really appreciate it if you could report anything strange or suspicious to me by PM. I'm not taking anything for granted and it's obvious that CADTutor has now become a target for hackers, so early reports of anything unusual would be welcome. Thanks Quote
Patrick Hughes Posted January 25, 2011 Posted January 25, 2011 The CADTutor site was hacked yesterday. All rougue files have now been removed and passwords changed. However, I remain on high alert. Please let me know if you are still receiving warnings about this site, giving as much detail as you can. It is possible that the site has been flagged as containing malware, even though it has now been removed, so the warning may only be theoretical. For what it's worth I had noticed the last couple of days (twice at least) when I would visit CadTutor an Adobe Acrobat window would open, then close. Quote
Lee Mac Posted January 25, 2011 Posted January 25, 2011 For what it's worth I had noticed the last couple of days (twice at least) when I would visit CadTutor an Adobe Acrobat window would open, then close. Ditto .... Quote
The Buzzard Posted January 25, 2011 Posted January 25, 2011 For what it's worth I had noticed the last couple of days (twice at least) when I would visit CadTutor an Adobe Acrobat window would open, then close. I saw the same thing and java seemed to be running a script. Quote
fahim108 Posted January 26, 2011 Author Posted January 26, 2011 I didn't get any warnings from Chrome today. So, lets hope it got sorted... Quote
The Buzzard Posted January 26, 2011 Posted January 26, 2011 Just received another strange dialog when logging in 3:25pm EST. See attached image. Also adobe starts to run. Quote
nestly Posted January 26, 2011 Posted January 26, 2011 Yep, the Attack Site warning is back, but with different sites, and more of them Quote
eldon Posted February 2, 2011 Posted February 2, 2011 I just got a warning from AVG. Are they still at it Quote
paul1966 Posted February 2, 2011 Posted February 2, 2011 yep i had a warning from kaspersky about an hour ago when the page was loading. Quote
Jack_O'neill Posted February 3, 2011 Posted February 3, 2011 Norton gave me one earlier today too, said it had blocked an attack from some such ip address. I can send it to you if it will help. Quote
Jack_O'neill Posted February 3, 2011 Posted February 3, 2011 It just did it again. Says the attacking computer is 72.105.128.60, url is bao6.co.cc/imgurlf.php?hl=35bf1da2ef487ab0. While typing this, I got 2 more notifications. 209.44.106.86 was the ip on both of those. Quote
CADTutor Posted February 3, 2011 Posted February 3, 2011 It's cat and mouse at the moment. They break something and I fix it. The server support guys are currently conducting a complete scan of the server but it's likely to take another 5 hours so I think I'll close the forum until that completes. Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.