Something strange is going on. Attack on Vbulletin?

[mrtroybaker]

In the past couple of days one of my admins started getting a "trojan horse" warning from is antivirus.

http://www.myreptileplanet.com/admincp/index.php
HTML:IFrame-GZ [Trj]
090602-0, 06/02/2009

This was reported in this post from another user
https://vborg.vbsupport.ru/showthread.php?t=215269

Today, I started getting e-mails from members saying when trying to log in they were getting the following error. If I logged out I would get the same error. I would also get the same error what trying to log into the admin control panel

Parse error: parse error, unexpected $, expecting T_VARIABLE or '$' in /home/content/k/a/h/kahunadog/html/login.php on line 73

After comparing the original file with the file on the server I noticed that the file on the server only had 73 lines, where as the original has 305 lines.

I replaced the file on the server with the original and everything went back to normal.

--------------- Added 1244403153 at 1244403153 ---------------

Anyone? Hello

[mrtroybaker]

Your kidding right? No one?

[Lynne]

I'm not sure what you want here. You said you replaced the file and everything now works. Did you check the date of the login.php file before you replaced it? Was it you who last uploaded it? Or, if it wasn't you, did you check your access_logs or ask your host to help you find out the ip of the last few people who either ftped to your site or had ssh access?