PDA

View Full Version : Trojan through broweser misc.php?v


jpietrowiak
06-11-2013, 01:03 PM
Hello All,
I have googled this several places and not one seems to have a for sure answer. Some say its a false positive, some people blame the host. Not sure what to think other then it will scare users away if this comes up so its not good.

How it happened. I searched on google for "my website". Then clicked on a google link http://example.com/manufacturing/. Now since I recently upgraded the forum I have put redirection URL's for old url which this one was, so I don't know if that would be part of the problem as to why this looks like a trojan either.

Here is Avast web details of infection. However if I go through the exact same process the error no longer comes up.

hURL: http://example.com/misc.php?v
Process: ........firefox.exe
Infection: HTML:RedirDL-inf [Trj]

oh also if I put that misc.php link in my forum it actually loads all the smiles on the page that the forum uses.
I also found this, not sure if it still applies to the latest 4.2.1 version http://www.vbulletin.com/forum/forum/vbulletin-4/vbulletin-4-questions-problems-and-troubleshooting/389819-vbulletin-3-x-and-4-x-redirect-security-exploit

Vbulletin Version 4.2.1

Thanks