Sherri, On the state coordinator's <http://usgenweb.org/about/statecoordinators.shtml> page, Kevin Haddenham is no longer ASC for Wyoming. Please remove him. Thanks. Colleen

Yes, it's been reinserted. We've also removed it once again. <sigh> We're on the phone with IX again. I'm checking through, but so far WI is the only one I've found infected this time around. We'll be rechecking everything, though, once again. As of right now, the USGenWeb National site in not infected. Sherri -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Mike St. Clair/ST Sent: Friday, September 11, 2009 1:32 PM To: [email protected] Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed The code in the index page right after the "What's New" link still includes the iframe that references the bad guys at blackacez.cc. So if that has been cleaned, it's getting inserted back in the index page. Mike St. Clair -------------------------------------------------- From: "Shirley Cullum" <[email protected]> Sent: Friday, September 11, 2009 11:18 AM To: <[email protected]> Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed > My Avast AV is still detecting a virus in the WI index files. > > Shirley > > --- On Fri, 9/11/09, Joan Asche <[email protected]> wrote: > > > From: Joan Asche <[email protected]> > Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed > To: [email protected] > Date: Friday, September 11, 2009, 11:57 AM > > > The browser is Firefox. The AV is Avast. > > On Fri, Sep 11, 2009 at 8:08 AM, Sherri <[email protected]> wrote: >> Joan, >> >> The warning you're seeing is based on the Google warning that was before >> they cleaned the site - Google has not revisited since the hacker's >> efforts >> were removed. I know that Joy is working to get Google to revisit the >> site >> after the infection was removed. Until Google does revisit, this warning >> may pop up. >> >> What browser and anti-virus software are you using? I'm just trying to >> track what AV is providing the warning and which ones are not. I know my >> Norton's Endpoint Protection is not giving the warning. >> >> Sherri >> > > > ------------------------------- > To unsubscribe from the list, please send an email to > [email protected] with the word 'unsubscribe' without the > quotes in the subject and the body of the message > > ------------------------------- > To unsubscribe from the list, please send an email to > [email protected] with the word 'unsubscribe' without the > quotes in the subject and the body of the message ------------------------------- To unsubscribe from the list, please send an email to [email protected] with the word 'unsubscribe' without the quotes in the subject and the body of the message

Wyoming checking in

They were on the same hosting service, but the hosting service itself was not hit. I personally have other accounts hosted by the same service and they've not been affected at all. My Norton's is now finding the infection on the WI index page. I've checked the page a dozen times since yesterday and it was clean (including checking all of the source codes and it wasn't there). Just now, I'm finding the offending link again. I've reported to Joy and I know she's already working with the hosting service on this. Sherri -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Maureen Mead Sent: Friday, September 11, 2009 12:28 PM To: [email protected] Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed Hi, all I'm getting the same red warning when I visit it, too. It may be my browser and warning prefs I've set up within my browser. Mac OSX FireFox 3.5.2 (NoScript installed, AdBlocker installed) Norton's up and running One quick question--were these attacks all on the same host? I use Powweb and they are a real pain, re: passwords and so forth, but I've never been hit. I credit their diligence and am appreciative. Have a sunny weekend, I just went there and I got a message that it was an attack site. Gayle ?Maureen Mead SC CTGenWeb: ctgenweb.org CC Fairfield Co. CT: ctgenweb.org/county/cofairfield [email protected] -----Original Message----- From: Gayle Triller <[email protected]> To: [email protected] Sent: Thu, Sep 10, 2009 8:41 pm Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed I just went there and I got a message that it was an attack site. Gayle -----Original Message----- From: [email protected] ------------------------------- To unsubscribe from the list, please send an email to [email protected] with the word 'unsubscribe' without the quotes in the subject and the body of the message

Colorado and Arizona are present. Gail Meyer Kilgore

12:50 p.m. here in Michigan and just checked the Wisconsin site. Got a warning from my AntiVer software. Took a look at the source code and it is an <iframe src="http://blackacez.cc/tds/ (snipped) that is causing the problem. On a server that I have a site on a couple of years ago, we experienced this type of attack. The hacker usually puts in this code on the index of sites. The server company changed us over from simple FTP to Secure FTPS made us change out all our passwords to ones containing letters, symbols and numbers and we haven't had the problem since. <Fingers crossed> Feel for anyone having to deal with this. Hoping and keeping an eye on Michigan. Pat Hamp ASC MIGenWeb ----- Original Message ----- From: "Jan Cortez" <[email protected]> To: <[email protected]> Sent: Thursday, September 10, 2009 6:49 PM Subject: Re: [STATE-COORD] Latest Status - Re: [WIGEN] MAK sends WIGenWeb-VIRUS WARNING - > Good Grief - Must be whoever is doing this is going from USGW site to > site. > <VBS> > > Jan > > ----- Original Message ----- > From: "MAK - Transcriber" <[email protected]> > > >> WI CC's have recently found virus warnings on their county sites - and >> google search has also posted a warning - see below - >> I have been told a hacker got into the server and they are working on >> fixing the problem as you are reading this email - In the meantime - it >> is >> recommended to avoid FTP or visiting the sites. >> >> >> WIGenWeb Project - 3 visits - Jan 22 This site may harm your computer. >> ..... >> >> >> MAKtranscriber >> WIGenWeb ASC http://wigenweb.org/ >> WoodCoWI CC http://www.rootsweb.com/~wiwood >> PortageCoWI CC http://www.rootsweb.com/~wiportag >> MonroeCoWI CC http://www.rootsweb.com/~wimonroe

The browser is Firefox. The AV is Avast. On Fri, Sep 11, 2009 at 8:08 AM, Sherri <[email protected]> wrote: > Joan, > > The warning you're seeing is based on the Google warning that was before > they cleaned the site - Google has not revisited since the hacker's efforts > were removed.  I know that Joy is working to get Google to revisit the site > after the infection was removed.  Until Google does revisit, this warning > may pop up. > > What browser and anti-virus software are you using?  I'm just trying to > track what AV is providing the warning and which ones are not.  I know my > Norton's Endpoint Protection is not giving the warning. > > Sherri >

MTGenWeb SC reporting in. Can you add email for MTGW SC subscription? [email protected] Thanks much, Karen -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Sherri Sent: Thursday, September 10, 2009 5:08 AM To: [email protected] Subject: [STATE-COORD] Annual Roll-Call Section 4 of the USGenWeb Project Bylaws require that a rollcall be conducted of this mail list. The specific reference is: "Section 4. State Coordinators shall remain subscribed to the State Coordinators mailing list and maintain a current mailing list of all local-level coordinators. State Coordinators shall provide their name, postal address, and phone number to the National Coordinator to be held in strictest confidence and only used in the case of an emergency." Please also check http://www.usgenweb.com/about/statecoordinators.shtml to ensure that you are listed correctly (state, position & email address or contact link). Also please ensure that your state project's URL is listed correctly on both http://usgenweb.org/about/statecoordinators.shtml and http://usgenweb.org/states/index.shtml. Please reply to me *privately* with your personal contact info (postal address & phone number). If you have alternate email addresses that you may use, I'd appreciate it if you'd also share them. This information will be held in strictest confidence and used only in the case of emergency. I look forward to the upcoming year and working with all of you! Thank you, Sherri Bradley National Coordinator USGenWeb Project http://usgenweb.org ------------------------------- To unsubscribe from the list, please send an email to [email protected] with the word 'unsubscribe' without the quotes in the subject and the body of the message

Linda Ziemann IA GenWeb ASC On 9/10/09 11:04 PM, "Oregon Rain" <[email protected]> wrote: > Constance Diamond > IAGenWeb SC > ----- Original Message ----- > From: Sherri > To: [email protected] > Sent: Thursday, September 10, 2009 3:08 AM > Subject: [STATE-COORD] Annual Roll-Call > > > Section 4 of the USGenWeb Project Bylaws require that a rollcall be > conducted of this mail list. The specific reference is: > > "Section 4. State Coordinators shall remain subscribed to the State > Coordinators mailing list and maintain a current mailing list of all > local-level coordinators. State Coordinators shall provide their name, > postal address, and phone number to the National Coordinator to be held in > strictest confidence and only used in the case of an emergency." > > Please also check http://www.usgenweb.com/about/statecoordinators.shtml to > ensure that you are listed correctly (state, position & email address or > contact link). Also please ensure that your state project's URL is listed > correctly on both > http://usgenweb.org/about/statecoordinators.shtml and > http://usgenweb.org/states/index.shtml. > > Please reply to me *privately* with your personal contact info (postal > address & phone number). If you have alternate email addresses that you may > use, I'd appreciate it if you'd also share them. This information will be > held in strictest confidence and used only in the case of emergency. > > I look forward to the upcoming year and working with all of you! > > Thank you, > > Sherri Bradley > National Coordinator > USGenWeb Project > http://usgenweb.org > > > > > > > ------------------------------- > To unsubscribe from the list, please send an email to > [email protected] with the word 'unsubscribe' without the > quotes > in the subject and the body of the message > > > ------------------------------------------------------------------------------ > > > > No virus found in this incoming message. > Checked by AVG - www.avg.com > Version: 8.5.409 / Virus Database: 270.13.87/2356 - Release Date: 09/09/09 > 06:53:00 > > ------------------------------- > To unsubscribe from the list, please send an email to > [email protected] with the word 'unsubscribe' without the > quotes in the subject and the body of the message

Hi, all I'm getting the same red warning when I visit it, too. It may be my browser and warning prefs I've set up within my browser. Mac OSX FireFox 3.5.2 (NoScript installed, AdBlocker installed) Norton's up and running One quick question--were these attacks all on the same host? I use Powweb and they are a real pain, re: passwords and so forth, but I've never been hit. I credit their diligence and am appreciative. Have a sunny weekend, I just went there and I got a message that it was an attack site. Gayle ?Maureen Mead SC CTGenWeb: ctgenweb.org CC Fairfield Co. CT: ctgenweb.org/county/cofairfield [email protected] -----Original Message----- From: Gayle Triller <[email protected]> To: [email protected] Sent: Thu, Sep 10, 2009 8:41 pm Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed I just went there and I got a message that it was an attack site. Gayle -----Original Message----- From: [email protected]

The code in the index page right after the "What's New" link still includes the iframe that references the bad guys at blackacez.cc. So if that has been cleaned, it's getting inserted back in the index page. Mike St. Clair -------------------------------------------------- From: "Shirley Cullum" <[email protected]> Sent: Friday, September 11, 2009 11:18 AM To: <[email protected]> Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed > My Avast AV is still detecting a virus in the WI index files. > > Shirley > > --- On Fri, 9/11/09, Joan Asche <[email protected]> wrote: > > > From: Joan Asche <[email protected]> > Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed > To: [email protected] > Date: Friday, September 11, 2009, 11:57 AM > > > The browser is Firefox. The AV is Avast. > > On Fri, Sep 11, 2009 at 8:08 AM, Sherri <[email protected]> wrote: >> Joan, >> >> The warning you're seeing is based on the Google warning that was before >> they cleaned the site - Google has not revisited since the hacker's >> efforts >> were removed. I know that Joy is working to get Google to revisit the >> site >> after the infection was removed. Until Google does revisit, this warning >> may pop up. >> >> What browser and anti-virus software are you using? I'm just trying to >> track what AV is providing the warning and which ones are not. I know my >> Norton's Endpoint Protection is not giving the warning. >> >> Sherri >> > > > ------------------------------- > To unsubscribe from the list, please send an email to > [email protected] with the word 'unsubscribe' without the > quotes in the subject and the body of the message > > ------------------------------- > To unsubscribe from the list, please send an email to > [email protected] with the word 'unsubscribe' without the > quotes in the subject and the body of the message

Tennessee Nancy Cole [email protected] [email protected] State Coordinator Technical Coordinator TNGenNet/TNGenWeb On Sep 10, 2009, at 4:08 AM, Sherri wrote: > Section 4 of the USGenWeb Project Bylaws require that a rollcall be > conducted of this mail list. The specific reference is: > > "Section 4. State Coordinators shall remain subscribed to the State > Coordinators mailing list and maintain a current mailing list of all > local-level coordinators. State Coordinators shall provide their name, > postal address, and phone number to the National Coordinator to be > held in > strictest confidence and only used in the case of an emergency." > > Please also check http://www.usgenweb.com/about/ > statecoordinators.shtml to > ensure that you are listed correctly (state, position & email > address or > contact link). Also please ensure that your state project's URL is > listed > correctly on both > http://usgenweb.org/about/statecoordinators.shtml and > http://usgenweb.org/states/index.shtml. > > Please reply to me *privately* with your personal contact info (postal > address & phone number). If you have alternate email addresses > that you may > use, I'd appreciate it if you'd also share them. This information > will be > held in strictest confidence and used only in the case of emergency. > > I look forward to the upcoming year and working with all of you! > > Thank you, > > Sherri Bradley > National Coordinator > USGenWeb Project > http://usgenweb.org > > > > > > > ------------------------------- > To unsubscribe from the list, please send an email to STATE-COORD- > [email protected] with the word 'unsubscribe' without the quotes > in the subject and the body of the message

Hi Sherri, I am checking in as Asst Coordinator for Indiana and the email is correct. Katy Hestand INGenWeb Coordinator Quoting Sherri <[email protected]>: > Section 4 of the USGenWeb Project Bylaws require that a rollcall be > conducted of this mail list. The specific reference is: > > "Section 4. State Coordinators shall remain subscribed to the State > Coordinators mailing list and maintain a current mailing list of all > local-level coordinators. State Coordinators shall provide their name, > postal address, and phone number to the National Coordinator to be held in > strictest confidence and only used in the case of an emergency." > > Please also check http://www.usgenweb.com/about/statecoordinators.shtml to > ensure that you are listed correctly (state, position & email address or > contact link). Also please ensure that your state project's URL is listed > correctly on both > http://usgenweb.org/about/statecoordinators.shtml and > http://usgenweb.org/states/index.shtml. > > Please reply to me *privately* with your personal contact info (postal > address & phone number). If you have alternate email addresses that you may > use, I'd appreciate it if you'd also share them. This information will be > held in strictest confidence and used only in the case of emergency. > > I look forward to the upcoming year and working with all of you! > > Thank you, > > Sherri Bradley > National Coordinator > USGenWeb Project > http://usgenweb.org > > > > > > > ------------------------------- > To unsubscribe from the list, please send an email to > [email protected] with the word 'unsubscribe' without > the quotes in the subject and the body of the message >

My Avast AV is still detecting a virus in the WI index files.   Shirley --- On Fri, 9/11/09, Joan Asche <[email protected]> wrote: From: Joan Asche <[email protected]> Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed To: [email protected] Date: Friday, September 11, 2009, 11:57 AM The browser is Firefox.  The AV is Avast. On Fri, Sep 11, 2009 at 8:08 AM, Sherri <[email protected]> wrote: > Joan, > > The warning you're seeing is based on the Google warning that was before > they cleaned the site - Google has not revisited since the hacker's efforts > were removed.  I know that Joy is working to get Google to revisit the site > after the infection was removed.  Until Google does revisit, this warning > may pop up. > > What browser and anti-virus software are you using?  I'm just trying to > track what AV is providing the warning and which ones are not.  I know my > Norton's Endpoint Protection is not giving the warning. > > Sherri > ------------------------------- To unsubscribe from the list, please send an email to [email protected] with the word 'unsubscribe' without the quotes in the subject and the body of the message

The Peach State checking in... Vivian Price Saffold State Coordinator The GAGenWeb Project At 06:08 AM 9/10/2009, you wrote: >Section 4 of the USGenWeb Project Bylaws require that a rollcall be >conducted of this mail list. The specific reference is: > >"Section 4. State Coordinators shall remain subscribed to the State >Coordinators mailing list and maintain a current mailing list of all >local-level coordinators. State Coordinators shall provide their name, >postal address, and phone number to the National Coordinator to be held in >strictest confidence and only used in the case of an emergency." > >Please also check http://www.usgenweb.com/about/statecoordinators.shtml to >ensure that you are listed correctly (state, position & email address or >contact link). Also please ensure that your state project's URL is listed >correctly on both >http://usgenweb.org/about/statecoordinators.shtml and >http://usgenweb.org/states/index.shtml. > >Please reply to me *privately* with your personal contact info (postal >address & phone number). If you have alternate email addresses that you may >use, I'd appreciate it if you'd also share them. This information will be >held in strictest confidence and used only in the case of emergency. > >I look forward to the upcoming year and working with all of you! > >Thank you, > >Sherri Bradley >National Coordinator >USGenWeb Project >http://usgenweb.org > > > > > > >------------------------------- >To unsubscribe from the list, please send an email to >[email protected] with the word 'unsubscribe' without >the quotes in the subject and the body of the message

Second asst. state coordinator from Indiana, all is correct. Sharon A. Craig Hamilton Co. InGenWeb Coordinator Assistant In GenWeb State Coordinator   --- On Fri, 9/11/09, [email protected] <[email protected]> wrote: From: [email protected] <[email protected]> Subject: Re: [STATE-COORD] Annual Roll-Call To: [email protected] Date: Friday, September 11, 2009, 11:32 AM Hi Sherri, I am checking in as Asst Coordinator for Indiana and the email is correct. Katy Hestand INGenWeb Coordinator Quoting Sherri <[email protected]>: > Section 4 of the USGenWeb Project Bylaws require that a rollcall be > conducted of this mail list.  The specific reference is: > > "Section 4. State Coordinators shall remain subscribed to the State > Coordinators mailing list and maintain a current mailing list of all > local-level coordinators. State Coordinators shall provide their name, > postal address, and phone number to the National Coordinator to be held in > strictest confidence and only used in the case of an emergency." > > Please also check http://www.usgenweb.com/about/statecoordinators.shtml to > ensure that you are listed correctly (state, position & email address or > contact link).  Also please ensure that your state project's URL is listed > correctly on both > http://usgenweb.org/about/statecoordinators.shtml and > http://usgenweb.org/states/index.shtml. > > Please reply to me *privately* with your personal contact info (postal > address & phone number).  If you have alternate email addresses that you may > use, I'd appreciate it if you'd also share them.  This information will be > held in strictest confidence and used only in the case of emergency. > > I look forward to the upcoming year and working with all of you! > > Thank you, > > Sherri Bradley > National Coordinator > USGenWeb Project > http://usgenweb.org > > > > > > > ------------------------------- > To unsubscribe from the list, please send an email to    > [email protected] with the word 'unsubscribe' without  >  the quotes in the subject and the body of the message > ------------------------------- To unsubscribe from the list, please send an email to [email protected] with the word 'unsubscribe' without the quotes in the subject and the body of the message

California Checking In. Martha A Crosley Graham SC http://www.cagenweb.com Personal information sent privately Martha

Cheryl Rothwell ILGenWeb ASC

*** Please forward to all applicable lists: *** The Board is now accepting applications from interested volunteers for the position of Parliamentarian for the 2009/10 term, ending 31 August 2010. Interested volunteers should submit a completed Volunteer Form located at http://usgenweb.org/volform.shtml. Please ensure that you include a description of your experience with or training in parliamentary procedures in your application. Volunteer forms must be received by 8 pm EDT 25 September 2009. Sherri Bradley National Coordinator USGenWeb Project http://usgenweb.org

Joan, The warning you're seeing is based on the Google warning that was before they cleaned the site - Google has not revisited since the hacker's efforts were removed. I know that Joy is working to get Google to revisit the site after the infection was removed. Until Google does revisit, this warning may pop up. What browser and anti-virus software are you using? I'm just trying to track what AV is providing the warning and which ones are not. I know my Norton's Endpoint Protection is not giving the warning. Sherri -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Joan Asche Sent: Friday, September 11, 2009 7:54 AM To: [email protected] Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed When I go to the site I get the following warning and I am not ignoring it. Reported Attack Site! This web site at www.wigenweb.org has been reported as an attack site and has been blocked based on your security preferences. Attack sites try to install programs that steal private information, use your computer to attack others, or damage your system. Some attack sites intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners. What happened when Google visited this site? Of the 1 pages we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-09-09, and the last time suspicious content was found on this site was on 2009-09-09. Malicious software includes 1 trojan(s). Successful infection resulted in an average of 2 new process(es) on the target machine. Malicious software is hosted on 1 domain(s), including blackacez.cc/. This site was hosted on 1 network(s) including AS32392 (OPENTRANSFER). J. Asche On Thu, Sep 10, 2009 at 10:41 PM, MAK - Transcriber <[email protected]> wrote: > A Big thank you to Joy who fixed our Wisconsin pages today - we are back in business. > > However, when I click on http://www.wigenweb.org/  - I still am seeing the VIRUS report - so I am guessing we can ignore it? > > Tina will not be on-line for a couple days - computer woes!!! > R/S MAK > >  ..... ------------------------------- To unsubscribe from the list, please send an email to [email protected] with the word 'unsubscribe' without the quotes in the subject and the body of the message