Malware was found on the forum - looking for advice / help

[losasso]

One of my forums was hacked few days ago.

practical machinist .com

Google Webmaster tools keeps telling me that this code is present on my pages, but when i view the code, its nowhere to be found. It looks like its showing randomly on the forum and I never found it on any of the pages.

###script type="text / avascript" src="http://www. erikymkzf. co.
cc/ build.....? var"###

(original code is broken with spaces - not to be crackable)

- I checked Footer, header code, camper it with the test version we have for the website, nothing was found there.

- I run virus scan on the server - nothing was found

- We looked for that code in all files on the server - it was not found

- I also have VBSEO that I'm updating now and few Ad Managment modules that appear to be ok.

At that point we are not sure where to look and how to troubleshoot the problem

If anybody can help we are ready to pay.

Thank you

[Lynne]

Is this a Paid Request? If so, I need to move it to the appropriate forum. If it is not, then please remove any mention of payment.

[losasso]

Well i was trying to troubleshoot it and did a lot of things so far, So looking for advice.... I'm just ready to pay if somebody can help.

Can you point me to there, I will post a message there as well.

Thank you Lynne

[BirdOPrey5]

<a href="https://vborg.vbsupport.ru/forumdisplay.php?f=30" target="_blank">Request for Paid Services</a> forum- the last one on the forums page.

However bast advice would be to re-upload all your original VB files.

If it's still showing up it's likely been inserted into a template and is in the database so searching files for viruses won't help.

You need to "search all templates" in admincp or the database itself in the tempaltes table.

[TNCclubman]

If you had posted 'god help us' your thread would have to be moved to the religion forum...

jk

[losasso]

Its randomly showing up, and it finally showed up for me! See attached image with and without the code. When i check in the header, nothing is there

https://vborg.vbsupport.ru/external/2011/02/4.png

https://vborg.vbsupport.ru/external/2011/02/5.png

Nothing is inside the header files... other than this code...

<if condition="$vboptions['externalrss']">
<link rel="alternate" type="application/rss+xml" title="$vboptions[bbtitle] RSS Feed" href="external.php?type=RSS2" />
<if condition="$show['foruminfo'] OR $show['threadinfo']">
<link rel="alternate" type="application/rss+xml" title="$vboptions[bbtitle] - $foruminfo[title_clean] - RSS Feed" href="external.php?type=RSS2&amp;forumids=$foruminfo[forumid]" />
</if>
</if>

[jimjam]

Hi, try this it worked for me

https://vborg.vbsupport.ru/showthread.php?t=220967&highlight=parse+template

[BirdOPrey5]

What's a header file? Do you mean header template? That looks nothing like my header template...