vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)
-   -   Malware - popup ads (https://vborg.vbsupport.ru/showthread.php?t=328118)

Dr.CustUmz 02-14-2021 09:07 PM

FB connect is obsolete

as for the rest did you download them from 3rd party sites? I see vBadvanced so I'm guessing some others may have been downloaded else where too.

Leachers will inject ads and malicious codes into products that is why I choose to share my products myself on vbulletin warez sites, because I would rather share something myself than to have someone redistribute my work and ruin my name.

But as snake said your going to have to clear your server host cache. Not knowing your provider, there could be a few ways to do this, so just google "how to clear site cache SERVER PROVIDER"

--------------- Added [DATE]1613344498[/DATE] at [TIME]1613344498[/TIME] ---------------

UPDATE neither link is displaying the misc. code for me (it is the same file either way) i could change ?v=3811 to ?v=41354 and it is still the same file (that v is only for caching)

knowing what we are looking for though:
- put all of your products you are using into one folder on your desktop
- open notepad++
- CTRL + F
- Find in files
- point the directory to your folder containing all the product files.
- Find What: graizoah
- Filters: *.xml*
- click find all

Repeat replacing filters with *.php*

If it is one of those products it should show up.

digif 02-15-2021 05:52 PM

Quote:

Originally Posted by Dr.CustUmz (Post 2606264)
FB connect is obsolete

as for the rest did you download them from 3rd party sites? I see vBadvanced so I'm guessing some others may have been downloaded else where too.

Leachers will inject ads and malicious codes into products that is why I choose to share my products myself on vbulletin warez sites, because I would rather share something myself than to have someone redistribute my work and ruin my name.

But as snake said your going to have to clear your server host cache. Not knowing your provider, there could be a few ways to do this, so just google "how to clear site cache SERVER PROVIDER"

--------------- Added [DATE]1613344498[/DATE] at [TIME]1613344498[/TIME] ---------------

UPDATE neither link is displaying the misc. code for me (it is the same file either way) i could change ?v=3811 to ?v=41354 and it is still the same file (that v is only for caching)

knowing what we are looking for though:
- put all of your products you are using into one folder on your desktop
- open notepad++
- CTRL + F
- Find in files
- point the directory to your folder containing all the product files.
- Find What: graizoah
- Filters: *.xml*
- click find all

Repeat replacing filters with *.php*

If it is one of those products it should show up.

First of all, thanks for the help, both of you..

All plugins were installed from this forum. By your instructions I've checked all plugins, 0 found the mentioned keyword.

Regarding the cache, I'm on namecheap hosting, can't find in cPanel something that could flush it. It's not on my end, I've tried at work, same ads pop up.

Dr.CustUmz 02-16-2021 04:50 AM

the only thing left i can see to do is download your www folder through FTP and do the same thing with the difference being for your filters use ** so it scans every file.

I have still not been able to reproduce this ad.

if you provide my account admin privilege's with access to at least styles and plugins I can check the backend for you.

snakes1100 02-16-2021 09:36 AM

Id give him phpmyadmin access as well & check the db for base code etc...

If your trusting enough & shell is active, just give him the cpanel login, ive worked a few sites from that host, shell can be turned on if its not.

Id do a grep -H -r "xxxxxxx" on the entire acct dir

digif 02-16-2021 02:49 PM

Quote:

Originally Posted by Dr.CustUmz (Post 2606284)
the only thing left i can see to do is download your www folder through FTP and do the same thing with the difference being for your filters use ** so it scans every file.

I have still not been able to reproduce this ad.

if you provide my account admin privilege's with access to at least styles and plugins I can check the backend for you.

Done the search in the whole websites folder, nothing found under 'graizoah'. Long time ago I've added a popup code, but I think I've removed it. I've searched for some kind of script code in styles and the whole website with notepad++, couldnt find anything.

Also, there are some threads that doesnt exist and are shown from the homepage. If you check the first forum, thread is called 'Sexy photo...', and if you press on it, error tells you thread doesnt exist.

Dr.CustUmz 02-16-2021 03:49 PM

I cant really help without any type of privileges


All times are GMT. The time now is 05:40 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01002 seconds
  • Memory Usage 1,733KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (6)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete