Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - Hugh Wallis

Pages: [1]
1
The Common Room / Re: Hugh Wallis IGI WARNING VIRUS - Fixed
« on: Tuesday 14 October 08 20:56 BST (UK)  »
You might like to know that Rootsweb have now changed my password and the clean web page is still in place so I hope that it will not get re-edited by whoever hacked in there in the first place

2
The Common Room / Re: Hugh Wallis IGI WARNING VIRUS - Fixed
« on: Tuesday 14 October 08 02:12 BST (UK)  »
Just got home - got the notice from rootsweb that they have put it back on line. However I checked the page and it did still have the offending code - I HAVE NOW REMOVED THE BAD CODE AND YOU SHOULD BE OK. Do, however, watch out in case this hacker gets back in again. The page appears to have been changed on July 9th 2008 but, since I do not keep a copy of my password on my computer the intrusion could not have emanated from me.

Thanks for everyone's support

Cheers

Hugh

3
The Common Room / Re: Hugh Wallis IGI WARNING VIRUS - Updated
« on: Sunday 12 October 08 22:25 BST (UK)  »
... not wanting to duplicate all his replies...

Indeed - that is my only rationale. Thanks for understanding - I didn't mean to offend anyone :)

Hugh

4
The Common Room / Re: Hugh Wallis IGI WARNING VIRUS - Updated
« on: Sunday 12 October 08 15:27 BST (UK)  »
I'm moving my contributions to the discussion over to http://www.british-genealogy.com/forums/showpost.php?p=205942&postcount=68 as there has been some useful input there from the moderator of that forum

Thanks

Hugh

5
The Common Room / Re: Hugh Wallis IGI WARNING VIRUS
« on: Saturday 11 October 08 14:49 BST (UK)  »

See: http://www.rootschat.com/forum/index.php/topic,316936.0.html

As kizmiaz said:
Quote

**Just having a look, and if you go through the URL which ends in ~hughwallis/ then there is some decidedly dodgy looking scripting right at the end of the page source, but if you add IGIBatchNumbers.htm after that, then there isn't! **

**Testing on IE, with all scripting allowed, there is definitley a script trying to run when loading the page**


The dodgy javascript points to googleanalitics.net (NOT to be confused with googleanalytics.com which is legit). If you go to the dodgy page it is blank, and viewing the source gives only:

<html><body></body></html>

... which means that the re-directed page is doing nothing whatsoever.

Some years ago there was a nasty crowd trying to emulate legitimate Google services, but there is no danger on the Hugh Wallis site now. The old 'bad' code is still there but it doesn't do anything.

:)
Koromo

I found the backup of (part of) my site and it definitely does have a link to googleanalytics.com which is simply there as a hit counter mechanism. It is NOT googleanalytics.net so unless someone hacked in and changed it, or they hacked into google or they hacked into some DNS servers or something it should be perfectly safe - it's been there for years without problem.

Since the web counter thing was only for my interest I would be happy to remove it in case it has something to do with this - but I need to be able to access the site to do that so I wait to hear back from rootsweb now

6
The Common Room / Re: Hugh Wallis IGI WARNING VIRUS - Updated
« on: Saturday 11 October 08 14:12 BST (UK)  »
I also posted to the RootsWeb support line and got this message back:

Hi,
"We have contacted Hugh Wallis at the address we have on file for him. If he didn't get this, and if you are in contact with him, please have him email us, and we can get in touch at his correct address.
"Mike
"RootsWeb Support"



Thanks everyone - I have found the rootsweb support address and sent them a couple of e-mails now - I'm surprised if they had a non working address on file for me but maybe they had my really really old one instead of just my really old one :)

I await their reply but, since it is a weekend - and a holiday weekend in the US to boot - it might be a while before they get back to me

7
The Common Room / Re: Hugh Wallis IGI WARNING VIRUS - Updated
« on: Saturday 11 October 08 05:00 BST (UK)  »


for Hugh's information, a new Rootschatter can't use the Personal Message system until they have made three posts on the board - this to prevent spamming by PM.



At the risk of opening up my e-mail to a lot of PMs - here's post number 2

And here's post number 3

Please keep the PMs to a minimum folks - if they get too much I may not be able to respond to everyone personally so please forgive me if you end up not getting a response - I'll try to answer everyone as I always do but if it gets out of hand .... well - I think you know what I'm saying

Cheers

Hugh

8
The Common Room / Re: Hugh Wallis IGI WARNING VIRUS - Updated
« on: Saturday 11 October 08 04:56 BST (UK)  »


for Hugh's information, a new Rootschatter can't use the Personal Message system until they have made three posts on the board - this to prevent spamming by PM.



At the risk of opening up my e-mail to a lot of PMs - here's post number 2

9
The Common Room / Re: Hugh Wallis IGI WARNING VIRUS - Updated
« on: Friday 10 October 08 14:58 BST (UK)  »
It appears some people have reported getting virus warnings from the site but, unless it is in the stuff ancestry.com adds, there is no virus there, and certainly not one inserted by me. I suspect ancestry.com have taken it offline. I also suspect that the anti-virus software that is giving these warnings is over zealous and has applied a heuristic detection algorthm to produce the warnings - and those algorithms are well known for producing occasional "false positives". Most reputable anti-virus software like AVG and Norton report the site as clean (or did until it was taken down by ancestry.com)

Unfortunately I have no control over it since ancestry.com do not even provide a means for me to change the password that is necessary to update the site. If some evil hacker has obtained that password somehow I can do nothing about it.

Actually I have not even accessed nor updated the site myself for many months.

Having no time to investigate further I shall be leaving it in the hands of ancestry.com - but they have not had the courtesy even to contact me so I don't know to what extent they intend to address the issue

Thanks

Hugh

Pages: [1]