chronoform website malware alert on google chrome

marcb 31 May, 2016
when I try to download in google chrome or firefox I get the malware alert on the download,

tried on two different computers is this something I should be worried about, I can't download and install chronoforms worried about malware ?
GreyHead 31 May, 2016
Hi marcb,

Yes, the site has been hacked, I have cleaned it twice now and, at the moment I think it is OK. I'm not the owner, that's Max, and I don't have full access so what I can do is limited.

I have just downloaded a copy using Chrome (click All downloads, then Recover Malicious file) and it shows up clean when scanned with both MalwareBytes Anti-Malware pro and with Windows Defender. I think that the download warning is just a carry-over from the site having been hacked.

Best wishes

Bob
marcb 01 Jun, 2016
Website seems ok, but downloads not allowed by google chrome it says zip is malicious and Chrome has blocked it. can't see a way round getting it downloaded as firefox does same thing.
GreyHead 01 Jun, 2016
Hi marcb,

In Chrome click the menu icon at the top right, then Downloads, then you can 'Recover Malicious File'.

I'll try to email you a copy if you tell me what you need to download.

Bob
hpinson 02 Jun, 2016
Is there any way you can tell us if files chronoforms files downloaded this morning, June 2, 2016 have a malicious payload?
hpinson 02 Jun, 2016
For what it's worth - June 2, 11:57 MST (GMT-7) I am experiencing the malware warning from Google in both Chrome and IE.

Mostly it seems to be links to the forums. Visiting the forums directly does not seem to trigger any warning. Just links via Google search.

http://www.chronoengine.com/forums/posts/f3/t96893.html?page=1

Results in:

"Dangerous
chronoengine.com/forums is not safe to visit right now.

Some pages on this website send visitors to the following dangerous websites: radiosvyazservis.myjino.ru."

Not sure if this is active on Google's part or cached - especially if you cleaned the site.
GreyHead 03 Jun, 2016
Hi hpinson,

I just re-checked and the site is currently clean as far as I can see, and has been since Monday. Max now needs to contact Google, etc. to request a re-scan to clear the warnings.

I have checked the CFv5 main download and that is clean. If you are concerned then I can email you copies that I downloaded before the hack.

Bob
hpinson 03 Jun, 2016
Hi. I just scanned the component, plugin, and module with Malwarebytes and they seem good. Sucks that you guys get hit with this sort of thing. I hope you can get it straightened out with Google quickly - hard on a small business with a good product.

I've been away from Chronoforms for awhile, and I just wanted to tell you guys that V5 is excellent. Really impressed! I did a fairly complex form today with output of radio buttons directed to the submit. Worked like a charm. Thanks for all your work on this.
GreyHead 03 Jun, 2016
Hi hpinson,

Thank you :-)

Bob
This topic is locked and no more replies can be posted.

VPS & Email Hosting 20% discount
hostinger