The Arcive of Official vBulletin Modifications Site.

VCCN · #1 03-26-2015, 06:48 AM

Hi guys,

We are exposed for the adultfriendfinder/myfilestore-crap and have tried to fix this several times with no luck.

According to this, we want to move the VB to a new server. (We need new hardware so why not fix both issues at the same time)

I assume if we move the complete installation from old to new server, the myfilestore-crap will remain on the new server as well.

What we want to do:

1. Install VB fresh on the new server
2. Migrate the exisiting DB to the new server (We have over 11000 users and 300000 threads, so starting a new DB is not a option)

Any tip/ideas how to do this successfully?
What files do we have to move (i guess /include/config.php is one of them)

Thanks in advance

Joachim
http://forum.vccn.no

ForceHSS · #2 03-26-2015, 07:05 AM

Is the adultfriendfinder on your site something you installed or are you saying you were hacked

VCCN · #3 03-26-2015, 07:19 AM

Quote:

Originally Posted by ForceHSS

Is the adultfriendfinder on your site something you installed or are you saying you were hacked

Hehe we was hacked...
The problem started a few months ago.
We have cleaned up everything we can, and upgraded to latest patchlevel.

ForceHSS · #4 03-26-2015, 07:48 AM

Then if you still have somethings then you have not fully cleaned. I can have a quick look if you want or you can post in paid section and hire someone

VCCN · #5 03-26-2015, 07:57 AM

Quote:

Originally Posted by ForceHSS

Then if you still have somethings then you have not fully cleaned. I can have a quick look if you want or you can post in paid section and hire someone

I have already posted in paid section, but if you want to take a quick look i would be more than happy!

RichieBoy67 · #6 03-26-2015, 03:21 PM

A fresh install may not and probably is not needed but if you go that route the easiest way would be to use Impex.

BTW - I have fixed many sites that wee hacked with that hack.

ForceHSS · #7 03-26-2015, 10:00 PM

I helped this guy last night and fixed the problem forgot to update this thread

VCCN · #8 05-28-2015, 02:35 PM

Quote:

Originally Posted by ForceHSS

I helped this guy last night and fixed the problem forgot to update this thread

Sorry late reply here.
The problem is not solved. i believe the malicious code is in the DB.
Have been searching absolutely all php files and cannot find anything.

To solve this temporary, i've added
if(($_GET['g']=='js') die;
to the top of misc.php
That stopped the forwarding to shit-pages.

Anyway, thanks for the try at least :-)

ForceHSS · #9 05-28-2015, 03:24 PM

Then it was added again as I fully cleaned it

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.10689 seconds Memory Usage 2,239KB Queries Executed 13 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (1)ad_showthread_firstpost (1)ad_showthread_firstpost_sig (1)ad_showthread_firstpost_start (3)bbcode_quote (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)navbar (3)navbar_link (120)option (9)post_thanks_box (2)post_thanks_box_bit (9)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (1)post_thanks_postbit (9)post_thanks_postbit_info (9)postbit (9)postbit_onlinestatus (9)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_postinfo_query fetch_postinfo fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start fetch_musername post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start post_thanks_function_fetch_thanks_bit_start post_thanks_function_show_thanks_date_start post_thanks_function_show_thanks_date_end post_thanks_function_fetch_thanks_bit_end post_thanks_function_fetch_post_thanks_template_start post_thanks_function_fetch_post_thanks_template_end tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

2 благодарности(ей) от:
EasyEazy, RichieBoy67

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!