vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   Forum and Server Management (https://vborg.vbsupport.ru/forumdisplay.php?f=232)
-   -   Gigapros Server Problem? (https://vborg.vbsupport.ru/showthread.php?t=249747)

MarkD793 09-01-2010 05:29 PM

Gigapros Server Problem?
 
I have been with Gigapros for close to a year and have been generally satisfied.

HOWEVER, I was hit with malware and after gigapros removed the files...I was hit again with in a few days...at least I thought. Tums out they never removed the original corrupted files. Now they say they aren't able to remove the corrupt files and that the tech dept must send it up to a higher dept to correct the problem. This has been going on for 2 weeks. The google warning and threat of malware is destroying my site.

Is anybody else experiencing this problem with Gigapros?

snakes1100 09-02-2010 08:07 PM

Well, it would help if you posted a link so we can view whats going on, it will most likely be a simple fix and easily removed, then you will need to update your site to remove the security hole they are using to inject it into your site.

final kaoss 09-05-2010 03:11 AM

He's talking about this site
http://www.pets-r-great.org/forum/
Search FTW.

Angel-Wings 09-05-2010 04:23 PM

Hmmm - what you write isn't right ;) It's not that 3 sites on your shared server are infected - would be a very strange shared server being located in the US, Switzerland and France at the same time.
When calling your site, sniff the headers and you'll see - there're 3 sites loaded with PHP files which all point to the same location - another site from Russia.

Check the PHP files of your board by downloading them from the official location then comparing them with your files, also check the DB (e.g. Templates) from where these files are called. If and only if there's nothing, check it again and if there's still nothing then and only then Gigapros is the problem.
Just if you write you've been hit with malware, did you setup your board again or just let it be ? Chances are high the problem is somewhere in your files where these calls are stored.

MarkD793 09-13-2010 12:47 PM

Thank you all.

Angel-Wings.... As I obviously have a lot to learn:o ... Could you give me more details about how to check the PHP and Templates.

Thank you in advance!

Angel-Wings 09-14-2010 04:27 PM

Download all files from trusted sources again, then your files. Create checksums for both (SHA256, RMD160 etc.) - not MD5 and compare what has changed and what you changed ;)

Then make a backup of your database and import it at your test machine going through the templates to search for the URL's being called when opening your site or loading of any external URL's - both inside the PHP files and your Templates.

Some files like the original VB ones call home and some Addons / Template authors do the same when installing their content, quite easy to find these, still the 3 URL's you mention are located somewhere.


All times are GMT. The time now is 08:09 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01012 seconds
  • Memory Usage 1,719KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (6)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete