Quote:
Originally Posted by Macsee
Update: AdminCP > Maintenance > Repair Tables seems to have done it! 
The table is now clean!
But, of course, the infection may exist in other tables so I would still be keen in running a search through the whole database for any malicious code.
To answer your question, yes, it's in phpmyadmin. |
Ok then run the two queries in ozzy's post above to check, that's what those do i.e. they "Select" results from the tables in question IF any of the codes are present withing them such as %base64% see how in between the percentages it has base64 which is what you're specifically looking for they simply don't delete, you must do that manually (be forewarned though in rare cases some valid mods use base64 code so don't just go blindly deleting everything that comes up in results).
Also are you 100% sure that your files are clean? Make sure you download the same version of vBulletin from the members area, overwrite all vBulletin files AND while you are in there check the date on files the timestamps rather... any new files? Any recently modified files per the timestamps? If so overwrite those with clean files and/or delete.
09-17-2013, 12:31 PM
Hybrid Mode
