Log in

View Full Version : Do I have a possible "footer" hack?


garyopa
01-31-2010, 01:42 AM
I been running fine for years with always the latest licensed versions of Vbulletin and VBadvance with no problems.

Until the other day, I had some SQL database errors, but I was able to repair the database, but then I notice that when viewing the main page (the cmps_index) one, I get a timeout message, and looking at the source in my IE browser, I noticed this:


<!-- vBadvanced 4-8-6-6-6 -->
<a href="http://www.zamansiz.com/"></a>
<a href="http://www.otoder.com/"></a>
<a href="http://www.findomestic.org/"></a>
<a href="http://www.findomesticbanca.org/"></a>
<a href="http://www.bankaustria.org/"></a>
</body>
</html>


It only appears on my VBA front page, all the other vbulletin forum pages are normal, site runs fine, no other issues.

I try to do a google search on my findings, and I only get a few weird different lang. sites talking about it, no english site, and they all reference that this comes with the non-legit VBSEO "nulled" scripts.

But I am only using VBA and Vbulletin and both of those products are legit, and I never installed any "nulled" scripts, and don't even know what they are.

Any help in solving this, or finding out how to rid it completely would be helpful, as editing the .php or replacing it, just brings in back again, so it must be linked somewhere on my server some-how.

Marco van Herwaarden
01-31-2010, 08:57 AM
Looks like a vBAdvanced issue, so you would be better off asking on their support forums.

garyopa
01-31-2010, 12:33 PM
Looks like a vBAdvanced issue, so you would be better off asking on their support forums.

I did, but so far no help on their site either, so I thought I would ask here, since this site is a wonderful forum, full of traffic and admins that might have see this before.