vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 4.x Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=245)
-   -   Anti-Spam Options - [GlowHost] Spam-O-Matic - Spam Firewall stops forum spam (https://vborg.vbsupport.ru/showthread.php?t=248042)

postcd 01-06-2014 12:01 PM

Dear Mod creator, Dear Community,

the GlowHost Spam-o-matic is excelent, it helps me much. But im experiencing malicious infection regarding "GlowHost - Spam-O-Matic 2.1.2"

First time i had some lower version of your mod. And when i got filestore72.info malicious redirect when comming to my forum from Google (not directly). Then when i disabled your mod, it started working. So i upgraded to the latest version and after few days filestore redirect is back. So i disale mod, and redirect is away :(

Please any idea how i can debug the cause?! Thank you

ForceHSS 01-06-2014 02:15 PM

Quote:

Originally Posted by postcd (Post 2472571)
Dear Mod creator, Dear Community,

the GlowHost Spam-o-matic is excelent, it helps me much. But im experiencing malicious infection regarding "GlowHost - Spam-O-Matic 2.1.2"

First time i had some lower version of your mod. And when i got filestore72.info malicious redirect when comming to my forum from Google (not directly). Then when i disabled your mod, it started working. So i upgraded to the latest version and after few days filestore redirect is back. So i disale mod, and redirect is away :(

Please any idea how i can debug the cause?! Thank you

You have a virus either on ur forums from being hacked or your own pc

djbaxter 01-06-2014 04:22 PM

Quote:

Originally Posted by postcd (Post 2472571)
Dear Mod creator, Dear Community,

the GlowHost Spam-o-matic is excelent, it helps me much. But im experiencing malicious infection regarding "GlowHost - Spam-O-Matic 2.1.2"

First time i had some lower version of your mod. And when i got filestore72.info malicious redirect when comming to my forum from Google (not directly). Then when i disabled your mod, it started working. So i upgraded to the latest version and after few days filestore redirect is back. So i disale mod, and redirect is away :(

Please any idea how i can debug the cause?! Thank you

Nothing to do with this add-on. Disabling any mod will flush the datastore and that will appear to banish the malware temporarily. It will be back after a day or two though until you track down and eradicate it.

There are numerous threads at vB.com, vB.org, and several other forums on this malware. It is enabled by poor server and password security, especially file and directory permissions. You need to lock down your server, update to the latest version of vBulletin and any add-ons, and then check all files from your AdminCP Maintenance menu. You need especially to disallow execution of any files in your upload directories (avatars, profile pics, etc.) and delete the entire install directory after every update.

It's also a good idea to ensure that you have password protected the vBulletin Admin at the server level and change all admin passwords to something secure.

postcd 01-07-2014 05:54 PM

djbaxter, you were right, error probably not in this Mod. I will need to check this, but i think i already found quick fix for this redirect. Adding line:
if($_GET['g']=='js') die;
into top of php code of the /misc.php file (more)

bayoujeeper 01-09-2014 12:57 AM

Ok ran it. Going to re-enable plugins and see what happens. thanks for the help.

ForceHSS 01-09-2014 02:53 AM

Quote:

Originally Posted by bayoujeeper (Post 2473150)
Ok ran it. Going to re-enable plugins and see what happens. thanks for the help.

This hope you dont have other tables missing

BamaStangGuy 01-09-2014 04:18 AM

Would be nice if this deleted all blog posts as well.

ForceHSS 01-09-2014 04:21 AM

Quote:

Originally Posted by BamaStangGuy (Post 2473175)
Would be nice if this deleted all blog posts as well.

Can pm you a custom mod that will do that

CharlieDelta 01-09-2014 02:11 PM

Quote:

Originally Posted by ForceHSS (Post 2473177)
Can pm you a custom mod that will do that

Really? You been holding out on us Force. ;)
I been having trouble with blog spam so I wouldn't mind using this.

bayoujeeper 01-17-2014 09:16 PM

Started getting this error last few days.

Database error in vBulletin 4.2.2:

Invalid SQL:
DELETE FROM glowhostspamomatic_remotecache WHERE `date` < DATE_SUB(NOW(), INTERVAL 30 DAY);;

MySQL Error : Table '.glowhostspamomatic_remotecache' doesn't exist
Error Number : 1146
Request Date : Friday, January 17th 2014 @ 12:04:10 PM
Error Date : Friday, January 17th 2014 @ 12:04:10 PM
Script : http://www.bayoujeepersoffroad.com/m...p?do=addmember
Referrer : http://www.bayoujeepersoffroad.com/m...p?do=checkdate
IP Address :
Username :
Classname : vB_Database_MySQLi
MySQL Version :


All times are GMT. The time now is 01:04 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.03482 seconds
  • Memory Usage 1,746KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (5)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (4)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete