John I had opened one email and read a comment and then I opened another that was a message from Zbird Bonnie to the slam page; I had opened it once before and could not read because updates were being made and replies could not be read; so I was just getting back, to see Bonnie's reply and my system blocked me. I choose to ignore the warning. So I could let you know your system may have been attacked. I hope this is not the case. I leave it up to you to have it checked out.

BWP... James... Best wishes for you and all other users...

John this is the message I am getting when trying to link to the site.

Warning - visiting this web site may harm your computer!
Suggestions:

Return to the previous page and pick another result.
Try another search to find what you're looking for.

Or you can continue to www.gotpoetry.com/ at your own risk. For detailed information about the problems we found, visit Google's Safe Browsing diagnostic page for this site.

For more information about how to protect yourself from harmful software online, you can visit StopBadware.org.

If you are the owner of this web site, you can request a review of your site using Google's Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.
Advisory provided by Google

I got the same message this morning when following the link in my email. I am hoping all is OK. Perhaps somebody with the required technical expertise should check it out.

Ozymandias wrote:

I got the same message this morning when following the link in my email. I am hoping all is OK. Perhaps somebody with the required technical expertise should check it out.

Rory thanks I am glad I am not the only one; don't want anyone to think I am crying wolf.

I am sure John will get to the bottom. On some of the attack messages they won't even let me in when I hit ignore.

I thanks for the quick response. BWP... James...

Seems gotpoetry.com has been infected with something...





Uploaded with ImageShack.us

On opening the message above, I got the following security message from Norton Antivirus:

An intrusion attack by gotpoetry.com was blocked.

IPS Alert Name: Web Attack: Mass Injection Website.

Attacking computer: gotpoetry.com (66.132.184.250, 80)

Attacker URL: gotpoetry.com/includes/javascript/infobox.js

Source address: 66.132.184.250 (66.132.184.250)

Traffic description: TCP, www-http

Network traffic from gotpoetry.com/includes/javascript/infobox.js matches the signature of a known attack. The attack was resulted from /DEVICE/HARDDISKVOLUME1/PROGRAM FILES/MOZILLA FIREFOX/FIREFOX.EXE

Whew! I'm so relieved I thought it was only me and maybe my computer was infected but I see I'm not alone and I hope collectively we can support what ever is needed to protect our site......

my email: phoebesummer @ rocketmail.com

Got a similar message. Using Google Chrome as a browser and Sophos Anti-Virus for Mac; not sure which triggered the warning.

Got the following list of URLs related to the site that are distributing malware in images, etc.

NOTE: Don't click on any of these links, obviously.


www.gotpoetry.com/imag...y_2006.jpg

www.gotpoetry.com/modu...tyhorn.gif

www.gotpoetry.com/modu.../blank.gif

www.gotpoetry.com/modu.../earth.gif

www.gotpoetry.com/modu.../clock.gif

Mozilla is reporting GP as an attack site.

I had my security support to run a scan on my computer this morning and they found nothing. That does not mean there is not a fox in the chicken house.

Maybe John will let us know something soon.

BWP... James... Like Tony said avoid the links above.

here is a site you can go to and click on a link to see if your computer is affected. I checked and mine isn't. when you come back and want to read a poem you may get a warning but you can just click ignore and you will be able to get to the poems. on any computer that has a virus protector on it gp has always come up as a site that could harm your computer. I've been on GP for five years and have had no issues despite the warnings. here's the link

www.dcwg.org

this malware is supposed to shut off the internet of infected computers on monday. the fix if you are infected is to call your server and most are already prepared to deal with this problem and get you back online. hope this helps.

Zbird wrote:

gp has always come up as a site that could harm your computer.

I am not saying you are wrong but this is a first for me. I never had these warnings before and now every time I get on I have to hit ignore.

I'm not sure the DCWG link is related to the issue on this site, FWIW. The DCWG link a case of trying to stop a botnet that's been out there for a while. This is about malware embedded on this site.

While it isn't the first time the site's been compromised, it's not a regular thing. I rarely get the notices and I'm pretty heavily protected.

My security system is making it harder and harder to get on site.

What does John have to do to address this problem?

BWP... James... I've been here now going on four years and this is the first I have ever had any kind of problem with site access because of any kind internet driven mulish infections.

BWP...

This is the text of the message that Norton is giving me:
Network traffic from www.gotpoetry.com/incl...infobox.js matches the signature of a known attack.

goes on to say the attack was toward the firefox executable.

eeeeeek....

Back on site but firefox still relaying same message; how long will it take for the warnings to be removed from firefox?

BWP...

Probably two days to 7 days depending on google's backlog.

Here is what happened. Back in February, there was a security alert with the software we use to manage the server. We patched the server and moved on.

Unknown to us is that that security hole was used to inject some code to the server back then. It remained dormant or unused for five months until this weekend when I went on vacation. (of course!)

It was the activated and reeked havoc from the 6th until last night when I returned from vacation.

I am assured the site is now clean. It will take several days for Google and the virus sites to update our status. In the meantime, either stay or wait a few days until you feel comfortable.

I apologize for these Russian hackers reeking havoc and for them ruining my vacation.

Hope your vacation was very enjoyable, John...
it's good to have you back.

Thanks much for the reassuring update!

i sort of understand half of this, as i know bugger all about computers.
why the hell would estonian computer geeks attack gotpoetry?...it's all a mystery to me - paul.

Thanks, John! It's such a relief.

Sorry for the interrupted vacation.

John sorry about your vacation; but it is nice to know when chips are down we can count on the daddy; and I am sure all the GP fans appreciate and the hard work you do to keep gotpoetry up and running.

Who is the man? John is the man and don't let anyone forget it.


Power to you John. BWP... JAMES...

" don't forget the songs that made you cry and the song that saved your life " - the smiths.

so good to see a clean entry back to GotPo!
Thanks John
and you brave souls who risked computer and limb to enter and let him know - thanks to you as well

relieved!
judih