vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB4 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=251)
-   -   How to remove Linkbucks?? (https://vborg.vbsupport.ru/showthread.php?t=302579)

CouponWCents 09-23-2013 10:23 PM

How to remove Linkbucks??
 
This all of a sudden popped up directing all my links to linkbucks. I searched and it was in my footer. I have removed it twice but it still keeps popping up in the footer. How do I remove this for good?

ozzy47 09-23-2013 10:32 PM

If you did not install a mod to do this then:

First you need to follow our advisory about deleting the install folder off your forums.

Then please read the following two blog posts:
http://www.vbulletin.com/forum/blogs...ve-been-hacked

http://www.vbulletin.com/forum/blogs...vbulletin-site

Also please see these recent security announcements:

vBulletin 4.1.x-4.2.x & All versions of vBulletin 5: http://www.vbulletin.com/forum/forum...-1-vbulletin-5
vBulletin 5.0.x patch released, for a different security issue: http://www.vbulletin.com/forum/forum...d-all-versions

CouponWCents 09-23-2013 10:38 PM

Yeah, I am not techie at all and hate to spend the money to have someone do this for me. Grrr thanks though!

ozzy47 09-23-2013 10:42 PM

Well they you may be between a rock and a hard place. If you don't feel comfortable doing it on your own, then the only option it to pay someone to clean it all up for you.

Should you decide to hire someone, make sure the price don't seem to good to be true. A few people on here have paid people to clean up after a hacker, only to get hit again, meaning they missed something somewhere.

Evoklub 09-27-2013 05:27 PM

Same problem, if anybody can help us, please pm.

(Did all of above, upgraded, etc, but the linkbucks redirection still there.)

ozzy47 09-27-2013 07:52 PM

So you followed each step, to the letter in the following posts:
http://www.vbulletin.com/forum/blogs...ve-been-hacked

http://www.vbulletin.com/forum/blogs...vbulletin-site

Evoklub 09-27-2013 07:54 PM

Ozzy, thanks, already did it, but now just found it: was in footer template. Removed the line with a linkbucks link, and now everything is nice again.

ozzy47 09-27-2013 08:01 PM

Good, glad you finally found out what the issue was, thanks for reporting you findings. :)

CouponWCents 09-30-2013 05:57 PM

I have removed it in the footer at least a dozen times but it keeps coming back...fyi...

ozzy47 09-30-2013 08:32 PM

Have you checked your cron jobs for any unknown ones, maybe it's there.


All times are GMT. The time now is 02:39 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01693 seconds
  • Memory Usage 1,725KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete