Author Topic: Hugh Wallis IGI WARNING VIRUS - Fixed  (Read 21090 times)

Offline custard_pot

  • RootsChat Senior
  • ****
  • Posts: 408
  • Census information Crown Copyright, from www.natio
    • View Profile
Hugh Wallis IGI WARNING VIRUS - Fixed
« on: Wednesday 08 October 08 21:00 BST (UK) »
I just want to warn everyone I have been on the above site and have had 3 virus warnings. I was on it a few days ago and got the same thing but could not be positive it was from that site as I had been on a couple of others but tonight I have only been on there so it is from that site.

Luckily I have a good virus program so please everyone be careful. It is really a pity as I was hoping to get the information I need from there.

Christine

Just an update on this I went on http://freepages.genealogy.rootsweb.com/~hughwallis/IGIBatchNumbers/CountryEngland.htm

last night with no problems but have just tried to go on it and it comes up that access is not available. I spent about 3 hours on the site last night.

I get the worm virus problem if I go on http://freepages.genealogy.rootsweb.com/~hughwallis/

Christine
Census information Crown Copyright, from www.nationalarchives.gov.uk

Smith, Warwickshire
Young, Leamington /Whitnash / Warwickshire
Somerfield / Bloxwich Staffordshire
Summerfield, Plymouth Devon
Jeffery, Dorset / Plymouth / Devon
Bouskill, Bagshaw, Nottinghamshire/ Barnsley / South yorkshire /
Gent, Blackburn, Wales Yorkshire / Nottingham / Rotherham / Barnsley / South yorkshire

Offline Little Nell

  • Global Moderator
  • RootsChat Marquessate
  • ********
  • Posts: 11,928
    • View Profile
Re: Hugh Wallis IGI WARNING VIRUS
« Reply #1 on: Wednesday 08 October 08 21:05 BST (UK) »
Christine

I've been on the site just now and no virus warning at all.  I use it quite a bit and my anti-virus is as up to date as it can be.  Since I don't think that the Hugh Wallis site has changed for many moons, it is more likely to be a hiccup in your anti-virus update.

Nell
All census information: Crown Copyright www.nationalarchives.gov.uk

Offline daval57

  • RootsChat Marquessate
  • *******
  • Posts: 3,941
  • Christmas 2011. My daughter Clare with me.
    • View Profile
Re: Hugh Wallis IGI WARNING VIRUS
« Reply #2 on: Wednesday 08 October 08 21:11 BST (UK) »
I'm with you Nell.
I've been on and off it for the past couple of hours.  No problems.
I'm using AVG at the moment.
 
-------------------
FORREST (Glasgow, Lanarkshire, Stirlingshire and Dunbartonshire)
ROONEY (Co Down, Co Antrim) 
BORTHWICK, FORTUNE, BARKER, SIVES (Lothians)
ANDERSON (Moray, Caithness)

Offline kizmiaz

  • RootsChat Aristocrat
  • ******
  • Posts: 1,489
    • View Profile
Re: Hugh Wallis IGI WARNING VIRUS
« Reply #3 on: Wednesday 08 October 08 21:12 BST (UK) »
What antivirus software is flagging the viruses? I have up-to-date AVG and it has never spotted anything on Hugh Wallis' site.

Theres a tiny bit of Javascript coding on a couple of the pages, probably from the Rootsweb header, so something in that may be triggering it.

(I've used the site for years, and my computer has never had a single virus from it. It may just be an overcautious software alarm)


Offline jc26red

  • RootsChat Marquessate
  • *******
  • Posts: 5,345
  • Census information Crown Copyright.
    • View Profile
Re: Hugh Wallis IGI WARNING VIRUS
« Reply #4 on: Wednesday 08 October 08 21:16 BST (UK) »
I'm with you on that Glen, I just went on there to check and nothing is flagging up on my anti-virus. I'm using avast also spybot which would normally spot a virus a mile off!
Please acknowledge when a restorer works on your photos, it can take hours for them to work their magic

Please scan at 300dpi minimum to help save the restorers eyesight.

Offline custard_pot

  • RootsChat Senior
  • ****
  • Posts: 408
  • Census information Crown Copyright, from www.natio
    • View Profile
Re: Hugh Wallis IGI WARNING VIRUS
« Reply #5 on: Wednesday 08 October 08 21:20 BST (UK) »
I used AVG for years up to a few weeks ago but was having so many problems with it because it would not let me update that I changed to Avast which found a lot of viruses on my computer that AVG had not found.

Avast updates at least twice a day and also includes spyware.

I have used Hugh Wallis regularly over the years but I am not willing to risk it at the moment.

Christine
Census information Crown Copyright, from www.nationalarchives.gov.uk

Smith, Warwickshire
Young, Leamington /Whitnash / Warwickshire
Somerfield / Bloxwich Staffordshire
Summerfield, Plymouth Devon
Jeffery, Dorset / Plymouth / Devon
Bouskill, Bagshaw, Nottinghamshire/ Barnsley / South yorkshire /
Gent, Blackburn, Wales Yorkshire / Nottingham / Rotherham / Barnsley / South yorkshire

Offline kizmiaz

  • RootsChat Aristocrat
  • ******
  • Posts: 1,489
    • View Profile
Re: Hugh Wallis IGI WARNING VIRUS
« Reply #6 on: Wednesday 08 October 08 21:27 BST (UK) »
There do seem to be a few reports on other sites of some problems on the site, also it has been mentioned on Rootschat before.

Some javascripting on the page is pointing to a known attack site.

Are you using Internet Explorer or Firefox. It may be worth giving Firefox a go, since it seems to be less prone to attacks

Glen

**Just having a look, and if you go through the URL which ends in ~hughwallis/ then there is some decidedly dodgy looking scripting right at the end of the page source, but if you add IGIBatchNumbers.htm after that, then there isn't! **

**Testing on IE, with all scripting allowed, there is definitley a script trying to run when loading the page**

Offline casalguidi

  • RootsChat Honorary
  • RootsChat Marquessate
  • *******
  • Posts: 14,447
    • View Profile
Re: Hugh Wallis IGI WARNING VIRUS
« Reply #7 on: Wednesday 08 October 08 21:47 BST (UK) »
Our (up to date) Bullguard picked up on something from there a little while ago and haven't had problems with other sites so it was definitely from there.  If I remember correctly, the virus warning didn't come up straight away but a number of times afterwards (at random?) until we emptied cookies etc..

Casalguidi
Census information is Crown Copyright http://www.nationalarchives.gov.uk

Offline Koromo

  • RootsChat Aristocrat
  • ******
  • Posts: 2,342
    • View Profile
Re: Hugh Wallis IGI WARNING VIRUS
« Reply #8 on: Wednesday 08 October 08 23:13 BST (UK) »

See: http://www.rootschat.com/forum/index.php/topic,316936.0.html

As kizmiaz said:
Quote

**Just having a look, and if you go through the URL which ends in ~hughwallis/ then there is some decidedly dodgy looking scripting right at the end of the page source, but if you add IGIBatchNumbers.htm after that, then there isn't! **

**Testing on IE, with all scripting allowed, there is definitley a script trying to run when loading the page**


The dodgy javascript points to googleanalitics.net (NOT to be confused with googleanalytics.com which is legit). If you go to the dodgy page it is blank, and viewing the source gives only:

<html><body></body></html>

... which means that the re-directed page is doing nothing whatsoever.

Some years ago there was a nasty crowd trying to emulate legitimate Google services, but there is no danger on the Hugh Wallis site now. The old 'bad' code is still there but it doesn't do anything.

:)
Koromo
Census information is Crown copyright from www.nationalarchives.gov.uk
____________________________________________________________

Lewis: Llanfair Kilgeddin | Abergavenny | NZ
Stallworthy: Bucks. | Samoa | NZ
Brothers: Nottingham | NZ
Darling: Dunbar | Tahiti
Keat: St Minver | NZ
Bowles: Deal | NZ
Coaney: Bucks.
Jones: Brecon