Re: [TheThinkTank] malware on bikecollectives.org?

28 Oct 2013 · *Diagnostic page for*

      This is a lot of helpful de-bugging info. Thanks for taking the time to
detail it!
I feel confident that Rich Points (community cycles) is already reading
these emails, but incase he isn't, I've directly CC'd him on this email.
(Rich is, as far as I can tell, the admin/owner of bike collectives wiki.)
Rich brought up some of the issues with the bike collective wiki at this
year bikebike, stating that there is constant spam and need for more admins.
This may be a good time to directly address some of the issues regarding
the wiki. If any one has any good ideas, or feel like they want to know
more about the issues, we can form a group to discuss this.
-momoko
On Mon, Oct 28, 2013 at 10:49 AM, Matthew VanSlyke <
vanslyke.matthew@gmail.com> wrote:
...
I believe you may be right, Ron (look at 'Next Steps' below). This is what
I was able to see when I got the malware message from Chrome. I apologize
if this is old news in this discussion.
-Matt
Safe Browsing*Diagnostic page for* www.bikecollectives.org
*What is the current listing status for www.bikecollectives.org?*
Site is listed as suspicious - visiting this web site may harm your
computer.
Part of this site was listed for suspicious activity 1 time(s) over the
past 90 days.
*What happened when Google visited this site?*
Of the 15 pages we tested on the site over the past 90 days, 1 page(s)
resulted in malicious software being downloaded and installed without user
consent. The last time Google visited this site was on 2013-10-27, and the
last time suspicious content was found on this site was on 2013-10-25.
Malicious software includes 1 trojan(s). Successful infection resulted in
an average of 2 new process(es) on the target machine.
Malicious software is hosted on 1 domain(s), including wpbh.org/http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=wpbh.org/&client=googlechrome&hl=en-US
.
4 domain(s) appear to be functioning as intermediaries for distributing
malware to visitors of this site, including cellulitecenter.info/http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=cellulitecenter.info/&client=googlechrome&hl=en-US
, big-e-biz.net/http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=big-e-biz.net/&client=googlechrome&hl=en-US
, cupcakelemon.biz/http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=cupcakelemon.biz/&client=googlechrome&hl=en-US
.
This site was hosted on 1 network(s) including AS26347 (DREAMHOST-AS)http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=AS:26347&client=googlechrome&hl=en-US
.
*Has this site acted as an intermediary resulting in further distribution
of malware?*
Over the past 90 days, www.bikecollectives.org did not appear to function
as an intermediary for the infection of any sites.
*Has this site hosted malware?*
No, this site has not hosted malicious software over the past 90 days.
*How did this happen?*
In some cases, third parties can add malicious code to legitimate sites,
which would cause us to show the warning message.
*Next steps:*

Return to the previous page.http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=http%3A%2F%2Fwww.bikecollectives.org%2F&client=googlechrome&hl=en-US#
If you are the owner of this web site, you can request a review of

your site using Google Webmaster Toolshttp://www.google.com/webmasters/tools/.
   More information about the review process is available in Google's Webmaster
   Help Centerhttp://www.google.com/support/webmasters/bin/answer.py?answer=45432
   .
On Mon, Oct 28, 2013 at 1:18 PM, mfen651@aol.com wrote:
...
For what its worth, not to disrupt normal conversation or flow amongst
the membership...I just attempted to access the site bikecollectives.orgvia a brandy new mac running a fresh download of Firefox and got the same
warning.
Matt
Dedicated follower, Occasional contributor, and always bicycle and hpv
advocate.
-----Original Message-----
From: Ron Kellis ron.kellis@velocitycoop.org
To: The Think Tank thethinktank@lists.bikecollectives.org
Sent: Mon, Oct 28, 2013 1:05 pm
Subject: Re: [TheThinkTank] malware on bikecollectives.org?
I got the same warning when I accessed the site on my Linux netbook
over the weekend. I don't get the warning at work through either Chrome or
IE 9.
Ron
On Sun, Oct 27, 2013 at 9:42 PM, David Oliver nowhere3@gmail.com wrote:
...
The Wiki is running an older version of Wikimedia which is vulnerable to
attacks is my best guess. 1.17 is really old.
On Sun, Oct 27, 2013 at 12:56 PM, Tom Bulten tom@oakdaleneighbors.orgwrote:
...
I'm getting a malware warning when I visit bikecollectives.org. Does
anyone know the status of the site?
http://www.google.com/safebrowsing/diagnostic?site=http://www.bikecollective...
Tom
Oakdale Neighbors
1260 Kalamazoo SE
Grand Rapids, MI 49507
www.oakdaleneighbors.org
616-248-2848
"Like" Oakdale Neighbors on Facebookhttps://www.facebook.com/OakdaleNeighbors.
Join our Facebook Group https://www.facebook.com/groups/149531095642/.
Connect on Nextdoor https://nextdoor.com/invite/10258b9c7bc69c1a6c4f.

Thethinktank mailing list
Thethinktank@lists.bikecollectives.org
To unsubscribe, send a blank email to
TheThinkTank-leave@bikecollectives.org
To manage your subscription, plase visit:
http://lists.bikecollectives.org/listinfo.cgi/thethinktank-bikecollectives.o...

Thethinktank mailing listThethinktank@lists.bikecollectives.org
To unsubscribe, send a blank email to TheThinkTank-leave@bikecollectives.org
To manage your subscription, plase visit:http://lists.bikecollectives.org/listinfo.cgi/thethinktank-bikecollectives.o...

Thethinktank mailing list
Thethinktank@lists.bikecollectives.org
To unsubscribe, send a blank email to
TheThinkTank-leave@bikecollectives.org
To manage your subscription, plase visit:
http://lists.bikecollectives.org/listinfo.cgi/thethinktank-bikecollectives.o...

Re: [TheThinkTank] malware on bikecollectives.org?

momoko saunders