vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB4 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=251)
-   -   How to remove a virus detected in my forum HTML/Rce.Gen (https://vborg.vbsupport.ru/showthread.php?t=273220)

samergains 11-02-2011 07:37 AM

How to remove a virus detected in my forum HTML/Rce.Gen
 
Hi everybody,
my forum is infected with a virus called HTML/Rce.Gen
it looks like only the home page is infected but i'm not sure. i'm getting a warning message from the anti-virus only on the homepage.
by viewing the source code of the homepage I found a javascript block added after the end of the html code.

any ideas about finding the infected files in my forum?
is there any method to remove the virus from admincp?
here is a link to give you some details about the virus:
http://www.threatexpert.com/report.a...7f16a20c7b351a

--------------- Added [DATE]1320228975[/DATE] at [TIME]1320228975[/TIME] ---------------

i found the javascript block in 'FORUMHOME' template and deleted it.
Now it's working fine but i'm not sure this is enough to protect my forum.

any suggestions for more security?


All times are GMT. The time now is 04:10 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.02724 seconds
  • Memory Usage 1,704KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (1)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete