[C320-list] C320 site hacked and is down for cleaning...

[Jeff Hare]

Hello again.

   Unfortunately, the hackers did a lot of damage to the website.  None of
the content is lost, just that they injected hacks into most of the source
code.

Somehow it didn't seem to matter that the files were all set to read-only
and the hosting company is really concerned about that.

I'm working with the hosting company to make sure the security hole gets
plugged properly this time.  As a result, the C320 website will be down for
a period of time until the site is rescanned and these iframes are stripped
from the site files.

Stay tuned and we'll be back as quickly as possible.  This discussion list
is unaffected so feel free to carry on.

-Jeff

-----Original Message-----
From: c320-list-bounces at lists.catalina320.com
[mailto:c320-list-bounces at lists.catalina320.com] On Behalf Of Jeff Hare
Sent: Tuesday, November 11, 2008 9:31 PM
To: C320-List at Catalina320.com
Subject: Re: [C320-list] Virus Found

Hello David,

Thanks for reporting this.  I located the source of this hack and corrected
it.  McAfee removed this mostly benign script.  Essentially it may have
enabled a fake popup to show at some point, but nothing major to worry
about.

Would you let me know if you see this again/still see it?

Thanks again.
-Jeff






-----Original Message-----
From: c320-list-bounces at lists.catalina320.com
[mailto:c320-list-bounces at lists.catalina320.com] On Behalf Of
Sail0983 at aol.com
Sent: Tuesday, November 11, 2008 3:25 PM
To: C320-List at Catalina320.com
Subject: Re: [C320-list] Virus Found

I get the following message in a Pop-up Window  when first entering  the 
Web-Site and the I am allowed to proceed.
 
McAfee has automatically repaired an infected file.
 
About this Trojan
Detected: JS/Tenia.d (Trojan)
Location:  C:\Users\Patricia\AppData\Local\Microsoft\Windows\Temporary 
Internet  Files\Content.IE5\P2EFISTG\catalina320_com[1].htm
 
Trojans appear as legitimate programs but can damage valuable files,
disrupt 
performance, and allow unauthorized access to your computer.
 
David Marchant
Solomons, MD
 
 
 
In a message dated 11/11/2008 2:41:40 P.M. Eastern Standard Time,  
bobnkaren1 at verizon.net writes:

I have  tried to go to the 320 Association website and, as of today, my 
antivirus  program has not let me go there citing a virus at the home page
as well 
as the  Association Roster.  Is anyone else having this problem?

Bob  Eichelberger
Second Wind,   #67

**************AOL Search: Your one stop for directions, recipes and all
other 
Holiday needs. Search Now. 
(http://pr.atwola.com/promoclk/100000075x1212792382x1200798498/aol?redir=htt
p://searchblog.aol.com/2008/11/04/happy-holidays-from
-aol-search/?ncid=emlcntussear00000001)