For those of you that have had issues trying to get to the SA Developer site over the last few weeks the good news is that its all back up and working again.
At the beginning of March we experienced some downtime due to a faulty server power supply. This was brought to our hosting company’s attention and after some troubleshooting and server hard reboots it appears to be stable now.
During March the site also underwent a major software upgrade from a rather out-dated Community Server 2.1 installation to the latest Community Server 2008 release. This upgrade has been a long time in the making and most users I’ve chatted to welcome the new functionality and new updated theme. If you are good at Community Server theme design please get in touch as we are looking for volunteers to assist with developing a unique and fresh site theme.
Today reports started coming in of the site theme looking squished up in Safari and Google Chrome. A quick check revealed an extraneous JavaScript link being inserted into the HTML page. After much hunting and suspecting that Community Server had been compromised, it was tracked down to what looks like two Trojan injections that had slipped past the Trend Micro ServerProtect antivirus that was installed. To mitigate the risk the IIS service was shutdown while the infection was dealt with. Avast Antivirus Server Edition was installed and quickly fixed the infections which had replaced part of the Windows TCP/IP and was injecting the erroneous script tag into the served content as you can see below.
Lets hope that this is the last of the site downtime for a good while now.
Posted
Thu, Apr 16 2009 19:59
by
CraigN