PDA

View Full Version : If you got hacked this week, lets compare plugins


steven vaccaro
01-26-2017, 03:07 PM
Hi,

Is my forum hacked? I got a redirect when click on google to my forum go to: filestore72.info wtf?

Seems several of us got this in the same time frame.

What plugins are you using? Im wondering if its connected to a plugin?

im using
itrader,
Admin Log In As User,
Remove Company Branding,
Forum Runner,
tapatalk,

Dave
01-26-2017, 03:29 PM
Is your forum runner plugin updated to the latest possible patch/version?
If not, that is the cause.

steven vaccaro
01-26-2017, 04:18 PM
Is your forum runner plugin updated to the latest possible patch/version?
If not, that is the cause.

It says 4.2.3 but I dont even use it. So I deleted it.

MarkFL
01-26-2017, 04:31 PM
It says 4.2.3 but I dont even use it. So I deleted it.

Did you also delete the associated files on your server?

steven vaccaro
01-26-2017, 05:12 PM
I deleted the forumrunner folder.

Before deleting it, I checked the forumrunner site and it seems they only had an update to version upto 3.8x. My plugin was version was listed as 4.2.3.

z3r0
01-26-2017, 05:33 PM
Is your 4.2.3 patch level 2? if so the forumrunner hack is already addressed (although getting rid of it altogether is a good idea).

Is your tapatalk the latest version 5.6.13 ?