vb.org Archive - Site Help: Hacked

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- Forum and Server Management (https://vborg.vbsupport.ru/forumdisplay.php?f=232)

- - Site Help: Hacked (https://vborg.vbsupport.ru/showthread.php?t=324806)

Site Help: Hacked

Google sent me a notice that my site has been hacked. I have been trying to replace files to eliminate the issue but I have had no luck. I signed up for SiteLock and they did a scan but said it is deeply rooter, whatever that means. I am in need of help to find the issue and get this resolved. Any help or route I can take to get help would be greatly appreciated. Thank you.

www.PennMustangs.com

It's a bit hard to tell from our position, it could be hidden in plugins, files, hooks, etc.

You might want to create a paid service request here: https://vborg.vbsupport.ru/forumdisplay.php?f=30

What made google think your site was hacked?

I registered to your site, seems as if you are having www issues as well. I was having issue surfing your site until I removed www from the URL.
I am not staying logged in anywhere.

Also, you are using vbadvanced v3.1.0. It is a vulnerability and you need to update it to 3.2.3

I would like to help you out, free of charge.

Quote:

Originally Posted by blind-eddie (Post 2584307)

What made google think your site was hacked?

I got an email about this from them regarding this.

Quote:

I registered to your site, seems as if you are having www issues as well. I was having issue surfing your site until I removed www from the URL.
I am not staying logged in anywhere.

Not sure how to resolve this?

Quote:

Also, you are using vbadvanced v3.1.0. It is a vulnerability and you need to update it to 3.2.3

I tried updating but keeping getting this error.

Code:

Database error in vBulletin 3.8.9:



Invalid SQL:



                                        CREATE TABLE adv_pages_user (

                                          pageid int(10) unsigned NOT NULL default '0',

                                          userid int(10) unsigned NOT NULL default '0',

                                          layout text NOT NULL,

                                          UNIQUE KEY pageid (pageid,userid)

                                        ) TYPE=MyISAM;



MySQL Error   : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'TYPE=MyISAM' at line 6

Error Number  : 1064

Request Date  : Monday, March 27th 2017 @ 07:51:42 AM

Error Date    : Monday, March 27th 2017 @ 07:51:42 AM

Script        : http://pennmustangs.com/forums/XXXXX...ps_install.php

Referrer      : http://pennmustangs.com/forums/XXXXX...ps_install.php

IP Address    : XXXXXX

Username      : XXXXXXX

Classname     : vB_Database

MySQL Version : 5.5.51-38.2

--------------- Added [DATE]1490619430[/DATE] at [TIME]1490619430[/TIME] ---------------

Quote:

Originally Posted by Kane@airrifle (Post 2584313)

filestore72 infection...

Resources:
https://www.vbulletin.com/forum/foru...lestore72-info

https://clients.urljet.com/knowledge...version-2.html

https://clients.urljet.com/knowledge...e123-Hack.html

Thank you. I am working through these.

Delete this line of code in the install file and try again

Code:

                if (version_compare(MYSQL_VERSION, '4.0.18', '<'))

                {

Also, change all instances of TYPE=MyISAM; to ENGINE=MyISAM;

Quote:

Originally Posted by blind-eddie (Post 2584388)

Delete this line of code in the install file and try again

Code:

                if (version_compare(MYSQL_VERSION, '4.0.18', '<'))

                {

That gives me this error now...

Quote:

Parse error: syntax error, unexpected '}' in /home1/XXX/public_html/forums/admincp/vbacmps_install.php on line 3608

Try removing the closing bracket that was associated with the if statement you removed.

Sorry, this is what needs removed from the install file

Code:

if (version_compare(MYSQL_VERSION, '4.0.18', '<')) { $enginevar = 'TYPE'; }

Quote:

Originally Posted by blind-eddie (Post 2584405)

Sorry, this is what needs removed from the install file

Code:

if (version_compare(MYSQL_VERSION, '4.0.18', '<')) { $enginevar = 'TYPE'; }

Still not working.

My offer stands as stated in my 1st post, I will help you, free of charge.

If you want free help with your issues, set my account on your site with full acp access and set up a temporary FTP account and pm me the info.

Quote:

Originally Posted by blind-eddie (Post 2584410)

Thank you. I would like to work through this so I can learn. My biggest issue is not knowing if it is removed or not. My next step is just completely replacing every file/plugin to insure the issue is removed.

X vBulletin 3.8.12 by vBS Debug Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (5)bbcode_code_printable (8)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (12)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages:

Phrase Groups Available:

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01098 seconds Memory Usage 1,748KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (5)bbcode_code_printable (8)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (12)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: