Trojan??!!!?!?

[tfusion]

Hi ,

Today my forum (10 minutes back) , Started linking to an external page on a different site (starts with mylangkawi) which is a php file... I dunno how it came into my forum , but my antviruses alert me of a trojan!!!

My forum is www.cash2post.com - currently suspended by me to prevent my members from being attacked...

NOTE : this is the second time , last time i reinstalled vBulletin with new files....

I think some file is infected... or coded.. without authorization ( I dunno if i m talking something mpossible)

Please help me out in this :|

With regards,
Tfusion

[Marco van Herwaarden]

What modifications did you have installed.

[Brandon Sheley]

if you have a decent host, they should be able to scan your ftp files.

[tfusion]

It isnt exactly as a file... the scan turned clean...

But! when someone visits the site or any page , it also opens the link in background?!?!

Is it a exploit?? is it a problem with my template???

Please help.

[Princeton]

if it's a link posted by others it's a trojan/spyware on their end

just ask member to clean their system - they will be more than happy to once you tell them that they may have a spyware installed on their computer

[Marco van Herwaarden]

The occasions where i saw this kind of defacing it was because a modification was installed that allowed HTML in thread titles to be parsed.