You mean it has the HTML_DLOADER.GUR as said below:

http://www.trendmicro.com/vinfo/viru...%2EGUR&VSect=T

I think this hack needs to be pulled because you add 1+1 you will get 2 so this script needs flagged immediately and if you read carefully there and see the .cn sites it's referring too after running a scan here on a local computer with Trend you will get the following results:

As you see it was caught by TrendMicro and NOD32 Server A/V...

So why the iframe in the admin file as asked going to the China website which now the file inde1.htm doesn't exist any longer...

Oh well just a heads-up for the rest :(

The Xeon Mp3 Player settings on our site is set to public viewing (for demonstration purposes), therefore it will show up from a direct url call.

This modification does not allow that feature for numerous reasons:

1. Bandwidth resources would be high
2. Uploading through PHP is normally restricted by most hosts to 2Mb (many Mp3's are over this size), therefore you would need to override this value using a php.ini file. However, not all hosts allow php.ini override.
3. Possible mis-use of the modification for illegal or copyrighted material uploading.

You can link to your own sites mp3's, but the admin would be required to upload. Basically, it gives you more control on what is uploaded, and you also have to consider the server cpu usage.

Mine is not and I had to add some things to the mp3popup template to adjust user permissions. If you follow the link in the navbar, it is fine. If you direct link it, it is not.

I have mine so that only a specific usergroup could see it. All I can say for others, is try it on your own site and decide for for yourself.

Any response to the iframe in the php file?

Hey CODER what is up with the IFRAMES in the ADMIN file and how come Trendmicro finds they are pretty lame links?

Edited:

Seems he took out the iframes...

If you have the mod marked installed, you would have received an email explaining this issue. It is also posted on this post:
https://vborg.vbsupport.ru/showpost....54&postcount=2

The extra lines were added by a Trojan on my system at the time, and not picked up by my AV - hence why it has been changed.

I've just tested the direct url and turned off 'Unregistered/Not Signed in' to access the player and received the default vBulletin log in box. I've now changed it back to public view. So I can't understand why you are receiving access to the player if the permissions per usergroup are set correctly.

The php file in question has been updated, and should be updated as stated in the 2nd post of this modification.

installed. Had to apply the fix to the xml file but after reinstalling it wirks a treat! Great hack! Just need some damn hosted mp3's now!

Anyone know where I can point users to to upload their music then they can link to it? Any good, free sites?

I am getting errors both when you click the link in the navbar AND when trying to add new MP3s. Any ideas? My members are really looking forward to this!!