If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.
All was repaired 2 days ago before you all got this message even thou you are still getting the alert. I had a PM from Tony saying that one of the Admin accounts that is not used was online from SF about a week ago. I called Ken to see if it was him a few days later. After I called him I got an email from a very knowledgeable member saying what his scan picked up and how to go about fixing it. I had the hosting company repair the site that night. Google does not look for the repair until I let them know it was fixed which I just did. It will stay flagged until Google checks it which can take up to a day for them to get to it. So now we just need for Google to get moving so they can verify it was fixed.
BTW I also changed the accounts that were the Admin accounts passwords and Kens Account is now just a standard posting member so if they were ever to get in under his account , they can not do anything.
I am also going to pay for a separate service that watches the site for me and fixes any malware files before this gets out of hand. This was my first real issue with the site being hacked and IMO because of the service I pay for it was fixed with out us going down. Next time it will be fixed as soon as a malware file is up loaded with the new upgraded service they just got me for.
With Windows, I wouldn't trust any password. If you type in any password into some Windows machine, there is high chance it will be stolen by some bot or virus running on it.
That's what may have happened with your admin password. People who access some important financial information through the Windows machine are nuts (in my opinion)!
I only use Linux at home and at work, and still don't trust passwords, especially for admin purposes.
Google developed a piece of software called Google Authenticator. It basically augments password with the security code synchronized with your smart phone. This is called two-factor authentication. So you type in login/password/security code. Security code changes every minute. So stealing your login info is meaningless.
I recommend, you ask your provider if they support this. If they don't, demand it! I am not sure if vBulletin supports it. They should for admin purposes. Otherwise, this will happen again and again. Especially if you administer it from the Windows machines.
With Windows, I wouldn't trust any password. If you type in any password into some Windows machine, there is high chance it will be stolen by some bot or virus running on it.
That's what may have happened with your admin password. People who access some important financial information through the Windows machine are nuts (in my opinion)!
I only use Linux at home and at work, and still don't trust passwords, especially for admin purposes.
Google developed a piece of software called Google Authenticator. It basically augments password with the security code synchronized with your smart phone. This is called two-factor authentication. So you type in login/password/security code. Security code changes every minute. So stealing your login info is meaningless.
I recommend, you ask your provider if they support this. If they don't, demand it! I am not sure if vBulletin supports it. They should for admin purposes. Otherwise, this will happen again and again. Especially if you administer it from the Windows machines.
Believe it or not they did get into the site admin area by going into Kens admin ID's. Ken has not been on the site in about a year. So it was not copied from a bot after he typed it.
I agree about the password being changed. I think it is a good idea to change your password here and any other site that you go to a lot, Also use different passwords.
Comment