[mscottralston]

Hey guys,

Yeah, google thinks we're still hacked, probably with the original issue (the occasional browser redirect; that password-logging plugin hasn't reinstalled itself yet, at least). I've been following google's advice, but curl is no help. Inspecting the front page, there are a few javascript codes I don't recognize. One might be google analytics? The others, I'm not sure.

For your consideration:

<script async="" src="https://www.google-analytics.com/analytics.js"></script>
<script type="text/javascript">
<!--
if (typeof YAHOO === 'undefined') // Load ALL YUI Local
{
document.write('<script type="text/javascript" src="clientscript/yui/yuiloader-dom-event/yuiloader-dom-event.js?v=420"><\/script>');
document.write('<script type="text/javascript" src="clientscript/yui/connection/connection-min.js?v=420"><\/script>');
var yuipath = 'clientscript/yui';
var yuicombopath = '';
var remoteyui = false;
}
else // Load Rest of YUI remotely (where possible)
{
var yuipath = 'clientscript/yui';
var yuicombopath = '';
var remoteyui = true;
if (!yuicombopath)
{
document.write('<script type="text/javascript" src="clientscript/yui/connection/connection-min.js"><\/script>');
}
}
var SESSIONURL = "";
var SECURITYTOKEN = "guest";
var IMGDIR_MISC = "images/misc";
var IMGDIR_BUTTON = "images/buttons";
var vb_disable_ajax = parseInt("0", 10);
var SIMPLEVERSION = "420";
var BBURL = "http://privateerpressforums.com";
var LOGGEDIN = 0 > 0 ? true : false;
var THIS_SCRIPT = "index";
var RELPATH = "forum.php";
var PATHS = {
forum : "",
cms : "",
blog : ""
};
var AJAXBASEURL = "http://privateerpressforums.com/";
// -->
</script>

<script type="text/javascript" src="clientscript/yui/yuiloader-dom-event/yuiloader-dom-event.js?v=420"></script>
<style>@media print {#ghostery-purple-box {display:none !important}}</style>
<script type="text/javascript" src="clientscript/yui/connection/connection-min.js?v=420"></script>
<script type="text/javascript" src="http://privateerpressforums.com/clientscript/vbulletin-core.js?v=420"></script>
<link rel="stylesheet" type="text/css" href="clientscript/vbulletin_css/style00009l/main-rollup.css?d=1479505047">

---

Since some of those plugins were hung on 'ajax', this seems promising. Any idea what 'Yui' is?

Thanks!

--------------- Added [DATE]1480440255[/DATE] at [TIME]1480440255[/TIME] ---------------

Also, per Superman's comment: I would very much like to download and rewrite my installation with a fresh copy my current version (4.2.0, patch 3) before upgrading to 4.2.3, but problematically, only 4.2.0 patch 4 is available for download off the official site. Any suggestions?

Thanks!