vb.org Archive
Page 2 of 3 1 2 3
Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)
-   -   Malware - popup ads (https://vborg.vbsupport.ru/showthread.php?t=328118)

snakes1100 02-14-2021 04:19 PM
Check the last time this file was touched/edited file permissions etc

vbulletin_read_marker.js

https://www.beneamata.com/clientscri...rker.js?v=3811

It appears to be hacked & has code in it.

Code:
Some messages have been moved to the Issues panel.
(index):1042 Uncaught ReferenceError: init_forum_readmarker_system is not defined
    at (index):1042
(anonymous) @ (index):1042
(index):477 GET https://graph.facebook.com/0/picture 400
(index):1 GET https://www.beneamata.com/immagini/barra2.png 404
vbulletin_read_marker.js?v=3811:1 GET https://graizoah.com/apu.php?zoneid=2936429 net::ERR_ABORTED 403 (Blocked by ESET Security)
(anonymous) @ vbulletin_read_marker.js?v=3811:1

digif 02-14-2021 04:32 PM
Quote:
Originally Posted by snakes1100 (Post 2606237)
Check the last time this file was touched/edited file permissions etc

vbulletin_read_marker.js

https://www.beneamata.com/clientscri...rker.js?v=3811

It appears to be hacked & has code in it.

Code:
Some messages have been moved to the Issues panel.
(index):1042 Uncaught ReferenceError: init_forum_readmarker_system is not defined
    at (index):1042
(anonymous) @ (index):1042
(index):477 GET https://graph.facebook.com/0/picture 400
(index):1 GET https://www.beneamata.com/immagini/barra2.png 404
vbulletin_read_marker.js?v=3811:1 GET https://graizoah.com/apu.php?zoneid=2936429 net::ERR_ABORTED 403 (Blocked by ESET Security)
(anonymous) @ vbulletin_read_marker.js?v=3811:1
It's weird, I can't find vbulletin_read_marker.js?v=3811, only the original one - vbulletin_read_marker.js

snakes1100 02-14-2021 04:35 PM
Ignore the ?v=3811, thats just for caching for browsers.

Just check vbulletin_read_marker.js

digif 02-14-2021 04:45 PM
Quote:
Originally Posted by snakes1100 (Post 2606245)
Ignore the ?v=3811, thats just for caching for browsers.

Just check vbulletin_read_marker.js
I've overwrote it with the original file from vB, you can check the file:
https://www.beneamata.com/clientscri...read_marker.js

snakes1100 02-14-2021 04:51 PM
That file looks correct now.

Clear any caches & chk the home page issue.

digif 02-14-2021 05:10 PM
Quote:
Originally Posted by snakes1100 (Post 2606249)
That file looks correct now.

Clear any caches & chk the home page issue.
The one with ?v.. is still showing different code. I've opened the website with Chrome, still same happens..

Dr.CustUmz 02-14-2021 05:51 PM
Quote:
Originally Posted by digif (Post 2606252)
The one with ?v.. is still showing different code. I've opened the website with Chrome, still same happens..
nice catch snake, i wasnt looking at any files since I wasnt seeing anything visually.

digif,

the v does not matter it is the same file, you need to clear your browser cache to make it reload the file.

You can do this by holding shift and pressing F5 or by using browser extensions

as a web developer I am constantly reloading cache, so much so it is my normal refresh the page button. I use https://chrome.google.com/webstore/d...kmgnhonkkjfpdn

digif 02-14-2021 06:24 PM
Quote:
Originally Posted by Dr.CustUmz (Post 2606253)
nice catch snake, i wasnt looking at any files since I wasnt seeing anything visually.

digif,

the v does not matter it is the same file, you need to clear your browser cache to make it reload the file.

You can do this by holding shift and pressing F5 or by using browser extensions

as a web developer I am constantly reloading cache, so much so it is my normal refresh the page button. I use https://chrome.google.com/webstore/d...kmgnhonkkjfpdn
I've cleared cache with a plugin, same crap again..

snakes1100 02-14-2021 07:25 PM
Yes, its still showing here
https://www.beneamata.com/clientscri...rker.js?v=3811

Not here:
https://www.beneamata.com/clientscri...read_marker.js

Is the server caching your content? If so you need to have the cache cleared or if your running a cache in the forum, like dragonbytes etc

digif 02-14-2021 08:30 PM
Quote:
Originally Posted by snakes1100 (Post 2606261)
Yes, its still showing here
https://www.beneamata.com/clientscri...rker.js?v=3811

Not here:
https://www.beneamata.com/clientscri...read_marker.js

Is the server caching your content? If so you need to have the cache cleared or if your running a cache in the forum, like dragonbytes etc
I'll give it time, maybe it'll clear itself, but the issue remains, how it came back.. These are the plugins I have installed:
https://i.imgur.com/9AI1kBP.jpg


All times are GMT. The time now is 07:16 PM.
Page 2 of 3 1 2 3
Show 40 post(s) from this thread on one page

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01252 seconds
  • Memory Usage 1,745KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_code_printable
  • (6)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 
Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete