When I go to the site I get the following warning and I am not ignoring it. Reported Attack Site! This web site at www.wigenweb.org has been reported as an attack site and has been blocked based on your security preferences. Attack sites try to install programs that steal private information, use your computer to attack others, or damage your system. Some attack sites intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners. What happened when Google visited this site? Of the 1 pages we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-09-09, and the last time suspicious content was found on this site was on 2009-09-09. Malicious software includes 1 trojan(s). Successful infection resulted in an average of 2 new process(es) on the target machine. Malicious software is hosted on 1 domain(s), including blackacez.cc/. This site was hosted on 1 network(s) including AS32392 (OPENTRANSFER). J. Asche On Thu, Sep 10, 2009 at 10:41 PM, MAK - Transcriber <[email protected]> wrote: > A Big thank you to Joy who fixed our Wisconsin pages today - we are back in business. > > However, when I click on http://www.wigenweb.org/  - I still am seeing the VIRUS report - so I am guessing we can ignore it? > > Tina will not be on-line for a couple days - computer woes!!! > R/S MAK > >  .....

Joan, The warning you're seeing is based on the Google warning that was before they cleaned the site - Google has not revisited since the hacker's efforts were removed. I know that Joy is working to get Google to revisit the site after the infection was removed. Until Google does revisit, this warning may pop up. What browser and anti-virus software are you using? I'm just trying to track what AV is providing the warning and which ones are not. I know my Norton's Endpoint Protection is not giving the warning. Sherri -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Joan Asche Sent: Friday, September 11, 2009 7:54 AM To: [email protected] Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed When I go to the site I get the following warning and I am not ignoring it. Reported Attack Site! This web site at www.wigenweb.org has been reported as an attack site and has been blocked based on your security preferences. Attack sites try to install programs that steal private information, use your computer to attack others, or damage your system. Some attack sites intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners. What happened when Google visited this site? Of the 1 pages we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-09-09, and the last time suspicious content was found on this site was on 2009-09-09. Malicious software includes 1 trojan(s). Successful infection resulted in an average of 2 new process(es) on the target machine. Malicious software is hosted on 1 domain(s), including blackacez.cc/. This site was hosted on 1 network(s) including AS32392 (OPENTRANSFER). J. Asche On Thu, Sep 10, 2009 at 10:41 PM, MAK - Transcriber <[email protected]> wrote: > A Big thank you to Joy who fixed our Wisconsin pages today - we are back in business. > > However, when I click on http://www.wigenweb.org/  - I still am seeing the VIRUS report - so I am guessing we can ignore it? > > Tina will not be on-line for a couple days - computer woes!!! > R/S MAK > >  ..... ------------------------------- To unsubscribe from the list, please send an email to [email protected] with the word 'unsubscribe' without the quotes in the subject and the body of the message

Avira AntiVir is still giving the warning for WIGenWeb. Elaine Martin Sherri wrote: > Joan, > > The warning you're seeing is based on the Google warning that was before > they cleaned the site - Google has not revisited since the hacker's efforts > were removed. I know that Joy is working to get Google to revisit the site > after the infection was removed. Until Google does revisit, this warning > may pop up. > > What browser and anti-virus software are you using? I'm just trying to > track what AV is providing the warning and which ones are not. I know my > Norton's Endpoint Protection is not giving the warning. > > Sherri > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Joan Asche > Sent: Friday, September 11, 2009 7:54 AM > To: [email protected] > Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed > > When I go to the site I get the following warning and I am not ignoring it. > > Reported Attack Site! > > This web site at www.wigenweb.org has been reported as an attack site > and has been blocked based on your security preferences. > > > Attack sites try to install programs that steal private information, > use your computer to attack others, or damage your system. > > Some attack sites intentionally distribute harmful software, but many > are compromised without the knowledge or permission of their owners. > > What happened when Google visited this site? > > Of the 1 pages we tested on the site over the past 90 days, 1 > page(s) resulted in malicious software being downloaded and installed > without user consent. The last time Google visited this site was on > 2009-09-09, and the last time suspicious content was found on this > site was on 2009-09-09. > > Malicious software includes 1 trojan(s). Successful infection > resulted in an average of 2 new process(es) on the target machine. > > Malicious software is hosted on 1 domain(s), including blackacez.cc/. > > This site was hosted on 1 network(s) including AS32392 (OPENTRANSFER). > > J. Asche > > On Thu, Sep 10, 2009 at 10:41 PM, MAK - Transcriber > <[email protected]> wrote: > >> A Big thank you to Joy who fixed our Wisconsin pages today - we are back >> > in business. > >> However, when I click on http://www.wigenweb.org/ - I still am seeing the >> > VIRUS report - so I am guessing we can ignore it? > >> Tina will not be on-line for a couple days - computer woes!!! >> R/S MAK >> >> ..... >> > > > ------------------------------- > To unsubscribe from the list, please send an email to > [email protected] with the word 'unsubscribe' without the > quotes in the subject and the body of the message > > > > > ------------------------------- > To unsubscribe from the list, please send an email to [email protected] with the word 'unsubscribe' without the quotes in the subject and the body of the message > > -- I am researching all branches of my family tree if for no other reason than to prove it does fork!

The browser is Firefox. The AV is Avast. On Fri, Sep 11, 2009 at 8:08 AM, Sherri <[email protected]> wrote: > Joan, > > The warning you're seeing is based on the Google warning that was before > they cleaned the site - Google has not revisited since the hacker's efforts > were removed.  I know that Joy is working to get Google to revisit the site > after the infection was removed.  Until Google does revisit, this warning > may pop up. > > What browser and anti-virus software are you using?  I'm just trying to > track what AV is providing the warning and which ones are not.  I know my > Norton's Endpoint Protection is not giving the warning. > > Sherri >

My Avast AV is still detecting a virus in the WI index files.   Shirley --- On Fri, 9/11/09, Joan Asche <[email protected]> wrote: From: Joan Asche <[email protected]> Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed To: [email protected] Date: Friday, September 11, 2009, 11:57 AM The browser is Firefox.  The AV is Avast. On Fri, Sep 11, 2009 at 8:08 AM, Sherri <[email protected]> wrote: > Joan, > > The warning you're seeing is based on the Google warning that was before > they cleaned the site - Google has not revisited since the hacker's efforts > were removed.  I know that Joy is working to get Google to revisit the site > after the infection was removed.  Until Google does revisit, this warning > may pop up. > > What browser and anti-virus software are you using?  I'm just trying to > track what AV is providing the warning and which ones are not.  I know my > Norton's Endpoint Protection is not giving the warning. > > Sherri > ------------------------------- To unsubscribe from the list, please send an email to [email protected] with the word 'unsubscribe' without the quotes in the subject and the body of the message

The code in the index page right after the "What's New" link still includes the iframe that references the bad guys at blackacez.cc. So if that has been cleaned, it's getting inserted back in the index page. Mike St. Clair -------------------------------------------------- From: "Shirley Cullum" <[email protected]> Sent: Friday, September 11, 2009 11:18 AM To: <[email protected]> Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed > My Avast AV is still detecting a virus in the WI index files. > > Shirley > > --- On Fri, 9/11/09, Joan Asche <[email protected]> wrote: > > > From: Joan Asche <[email protected]> > Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed > To: [email protected] > Date: Friday, September 11, 2009, 11:57 AM > > > The browser is Firefox. The AV is Avast. > > On Fri, Sep 11, 2009 at 8:08 AM, Sherri <[email protected]> wrote: >> Joan, >> >> The warning you're seeing is based on the Google warning that was before >> they cleaned the site - Google has not revisited since the hacker's >> efforts >> were removed. I know that Joy is working to get Google to revisit the >> site >> after the infection was removed. Until Google does revisit, this warning >> may pop up. >> >> What browser and anti-virus software are you using? I'm just trying to >> track what AV is providing the warning and which ones are not. I know my >> Norton's Endpoint Protection is not giving the warning. >> >> Sherri >> > > > ------------------------------- > To unsubscribe from the list, please send an email to > [email protected] with the word 'unsubscribe' without the > quotes in the subject and the body of the message > > ------------------------------- > To unsubscribe from the list, please send an email to > [email protected] with the word 'unsubscribe' without the > quotes in the subject and the body of the message

Sherri, AVG and my Firefox adaware caught it right away. Maggie ----- Original Message ----- From: "Sherri" <[email protected]> To: <[email protected]> Sent: Friday, September 11, 2009 8:08 AM Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed Joan, The warning you're seeing is based on the Google warning that was before they cleaned the site - Google has not revisited since the hacker's efforts were removed. I know that Joy is working to get Google to revisit the site after the infection was removed. Until Google does revisit, this warning may pop up. What browser and anti-virus software are you using? I'm just trying to track what AV is providing the warning and which ones are not. I know my Norton's Endpoint Protection is not giving the warning. Sherri -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Joan Asche Sent: Friday, September 11, 2009 7:54 AM To: [email protected] Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed When I go to the site I get the following warning and I am not ignoring it. Reported Attack Site! This web site at www.wigenweb.org has been reported as an attack site and has been blocked based on your security preferences. Attack sites try to install programs that steal private information, use your computer to attack others, or damage your system. Some attack sites intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners. What happened when Google visited this site? Of the 1 pages we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-09-09, and the last time suspicious content was found on this site was on 2009-09-09. Malicious software includes 1 trojan(s). Successful infection resulted in an average of 2 new process(es) on the target machine. Malicious software is hosted on 1 domain(s), including blackacez.cc/. This site was hosted on 1 network(s) including AS32392 (OPENTRANSFER). J. Asche On Thu, Sep 10, 2009 at 10:41 PM, MAK - Transcriber <[email protected]> wrote: > A Big thank you to Joy who fixed our Wisconsin pages today - we are back in business. > > However, when I click on http://www.wigenweb.org/ - I still am seeing the VIRUS report - so I am guessing we can ignore it? > > Tina will not be on-line for a couple days - computer woes!!! > R/S MAK > > ..... ------------------------------- To unsubscribe from the list, please send an email to [email protected] with the word 'unsubscribe' without the quotes in the subject and the body of the message ------------------------------- To unsubscribe from the list, please send an email to [email protected] with the word 'unsubscribe' without the quotes in the subject and the body of the message

You have to get Google to reconsider the site. Took about 24 hours for the warning to go away from the CP after it was fixed. Maggie ----- Original Message ----- From: "Joan Asche" <[email protected]> To: <[email protected]> Sent: Friday, September 11, 2009 7:54 AM Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed When I go to the site I get the following warning and I am not ignoring it. Reported Attack Site! This web site at www.wigenweb.org has been reported as an attack site and has been blocked based on your security preferences. Attack sites try to install programs that steal private information, use your computer to attack others, or damage your system. Some attack sites intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners. What happened when Google visited this site? Of the 1 pages we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-09-09, and the last time suspicious content was found on this site was on 2009-09-09. Malicious software includes 1 trojan(s). Successful infection resulted in an average of 2 new process(es) on the target machine. Malicious software is hosted on 1 domain(s), including blackacez.cc/. This site was hosted on 1 network(s) including AS32392 (OPENTRANSFER). J. Asche On Thu, Sep 10, 2009 at 10:41 PM, MAK - Transcriber <[email protected]> wrote: > A Big thank you to Joy who fixed our Wisconsin pages today - we are back in business. > > However, when I click on http://www.wigenweb.org/ - I still am seeing the VIRUS report - so I am guessing we can ignore it? > > Tina will not be on-line for a couple days - computer woes!!! > R/S MAK > > ..... ------------------------------- To unsubscribe from the list, please send an email to [email protected] with the word 'unsubscribe' without the quotes in the subject and the body of the message

Maggie, we'll do that as soon as we're sure the hacker's been stopped completely and can't get in and re-infect the site. We sure don't need to end up with Google reporting multiple times of checking the site and it still being infected. Sherri -----Original Message----- From: [email protected] [mailto:[email protected]sweb.com] On Behalf Of Maggie Stewart Sent: Friday, September 11, 2009 2:31 PM To: [email protected] Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed You have to get Google to reconsider the site. Took about 24 hours for the warning to go away from the CP after it was fixed. Maggie ----- Original Message ----- From: "Joan Asche" <[email protected]> To: <[email protected]> Sent: Friday, September 11, 2009 7:54 AM Subject: Re: [STATE-COORD] WIGenWeb - Virus fixed When I go to the site I get the following warning and I am not ignoring it. Reported Attack Site! This web site at www.wigenweb.org has been reported as an attack site and has been blocked based on your security preferences. Attack sites try to install programs that steal private information, use your computer to attack others, or damage your system. Some attack sites intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners. What happened when Google visited this site? Of the 1 pages we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-09-09, and the last time suspicious content was found on this site was on 2009-09-09. Malicious software includes 1 trojan(s). Successful infection resulted in an average of 2 new process(es) on the target machine. Malicious software is hosted on 1 domain(s), including blackacez.cc/. This site was hosted on 1 network(s) including AS32392 (OPENTRANSFER). J. Asche On Thu, Sep 10, 2009 at 10:41 PM, MAK - Transcriber <[email protected]> wrote: > A Big thank you to Joy who fixed our Wisconsin pages today - we are back in business. > > However, when I click on http://www.wigenweb.org/ - I still am seeing the VIRUS report - so I am guessing we can ignore it? > > Tina will not be on-line for a couple days - computer woes!!! > R/S MAK > > ..... ------------------------------- To unsubscribe from the list, please send an email to [email protected] with the word 'unsubscribe' without the quotes in the subject and the body of the message ------------------------------- To unsubscribe from the list, please send an email to [email protected] with the word 'unsubscribe' without the quotes in the subject and the body of the message