Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions
Reload this Page Malware - popup ads
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
Page 2 of 3 1 2 3
 
Thread Tools Display Modes
  #11  
Old 02-14-2021, 04:19 PM
snakes1100 snakes1100 is offline
 
Join Date: Dec 2001
Location: Michigan
Posts: 3,733
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Check the last time this file was touched/edited file permissions etc

vbulletin_read_marker.js

https://www.beneamata.com/clientscri...rker.js?v=3811

It appears to be hacked & has code in it.

Code:
Some messages have been moved to the Issues panel.
(index):1042 Uncaught ReferenceError: init_forum_readmarker_system is not defined
    at (index):1042
(anonymous) @ (index):1042
(index):477 GET https://graph.facebook.com/0/picture 400
(index):1 GET https://www.beneamata.com/immagini/barra2.png 404
vbulletin_read_marker.js?v=3811:1 GET https://graizoah.com/apu.php?zoneid=2936429 net::ERR_ABORTED 403 (Blocked by ESET Security)
(anonymous) @ vbulletin_read_marker.js?v=3811:1
Reply With Quote
Благодарность от:
Dr.CustUmz
  #12  
Old 02-14-2021, 04:32 PM
digif's Avatar
digif digif is offline
 
Join Date: Feb 2009
Location: Bosnia
Posts: 198
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Quote:
Originally Posted by snakes1100 View Post
Check the last time this file was touched/edited file permissions etc

vbulletin_read_marker.js

https://www.beneamata.com/clientscri...rker.js?v=3811

It appears to be hacked & has code in it.

Code:
Some messages have been moved to the Issues panel.
(index):1042 Uncaught ReferenceError: init_forum_readmarker_system is not defined
    at (index):1042
(anonymous) @ (index):1042
(index):477 GET https://graph.facebook.com/0/picture 400
(index):1 GET https://www.beneamata.com/immagini/barra2.png 404
vbulletin_read_marker.js?v=3811:1 GET https://graizoah.com/apu.php?zoneid=2936429 net::ERR_ABORTED 403 (Blocked by ESET Security)
(anonymous) @ vbulletin_read_marker.js?v=3811:1
It's weird, I can't find vbulletin_read_marker.js?v=3811, only the original one - vbulletin_read_marker.js
Reply With Quote
  #13  
Old 02-14-2021, 04:35 PM
snakes1100 snakes1100 is offline
 
Join Date: Dec 2001
Location: Michigan
Posts: 3,733
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Ignore the ?v=3811, thats just for caching for browsers.

Just check vbulletin_read_marker.js
Reply With Quote
  #14  
Old 02-14-2021, 04:45 PM
digif's Avatar
digif digif is offline
 
Join Date: Feb 2009
Location: Bosnia
Posts: 198
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Quote:
Originally Posted by snakes1100 View Post
Ignore the ?v=3811, thats just for caching for browsers.

Just check vbulletin_read_marker.js
I've overwrote it with the original file from vB, you can check the file:
https://www.beneamata.com/clientscri...read_marker.js
Reply With Quote
  #15  
Old 02-14-2021, 04:51 PM
snakes1100 snakes1100 is offline
 
Join Date: Dec 2001
Location: Michigan
Posts: 3,733
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
That file looks correct now.

Clear any caches & chk the home page issue.
Reply With Quote
  #16  
Old 02-14-2021, 05:10 PM
digif's Avatar
digif digif is offline
 
Join Date: Feb 2009
Location: Bosnia
Posts: 198
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Quote:
Originally Posted by snakes1100 View Post
That file looks correct now.

Clear any caches & chk the home page issue.
The one with ?v.. is still showing different code. I've opened the website with Chrome, still same happens..
Reply With Quote
  #17  
Old 02-14-2021, 05:51 PM
Dr.CustUmz's Avatar
Dr.CustUmz Dr.CustUmz is offline
 
Join Date: Aug 2013
Location: USA
Posts: 647
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Quote:
Originally Posted by digif View Post
The one with ?v.. is still showing different code. I've opened the website with Chrome, still same happens..
nice catch snake, i wasnt looking at any files since I wasnt seeing anything visually.

digif,

the v does not matter it is the same file, you need to clear your browser cache to make it reload the file.

You can do this by holding shift and pressing F5 or by using browser extensions

as a web developer I am constantly reloading cache, so much so it is my normal refresh the page button. I use https://chrome.google.com/webstore/d...kmgnhonkkjfpdn
Reply With Quote
  #18  
Old 02-14-2021, 06:24 PM
digif's Avatar
digif digif is offline
 
Join Date: Feb 2009
Location: Bosnia
Posts: 198
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Quote:
Originally Posted by Dr.CustUmz View Post
nice catch snake, i wasnt looking at any files since I wasnt seeing anything visually.

digif,

the v does not matter it is the same file, you need to clear your browser cache to make it reload the file.

You can do this by holding shift and pressing F5 or by using browser extensions

as a web developer I am constantly reloading cache, so much so it is my normal refresh the page button. I use https://chrome.google.com/webstore/d...kmgnhonkkjfpdn
I've cleared cache with a plugin, same crap again..
Reply With Quote
  #19  
Old 02-14-2021, 07:25 PM
snakes1100 snakes1100 is offline
 
Join Date: Dec 2001
Location: Michigan
Posts: 3,733
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Yes, its still showing here
https://www.beneamata.com/clientscri...rker.js?v=3811

Not here:
https://www.beneamata.com/clientscri...read_marker.js

Is the server caching your content? If so you need to have the cache cleared or if your running a cache in the forum, like dragonbytes etc
Reply With Quote
  #20  
Old 02-14-2021, 08:30 PM
digif's Avatar
digif digif is offline
 
Join Date: Feb 2009
Location: Bosnia
Posts: 198
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Quote:
Originally Posted by snakes1100 View Post
Yes, its still showing here
https://www.beneamata.com/clientscri...rker.js?v=3811

Not here:
https://www.beneamata.com/clientscri...read_marker.js

Is the server caching your content? If so you need to have the cache cleared or if your running a cache in the forum, like dragonbytes etc
I'll give it time, maybe it'll clear itself, but the issue remains, how it came back.. These are the plugins I have installed:
Reply With Quote
Reply
Page 2 of 3 1 2 3

« Previous Thread | Next Thread »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT. The time now is 11:34 PM.

Contact Us - Archive - Top

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.07477 seconds
  • Memory Usage 2,259KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (2)bbcode_code
  • (6)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (10)post_thanks_box
  • (1)post_thanks_box_bit
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (1)post_thanks_postbit
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 
Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • fetch_musername
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • post_thanks_function_fetch_thanks_bit_start
  • post_thanks_function_show_thanks_date_start
  • post_thanks_function_show_thanks_date_end
  • post_thanks_function_fetch_thanks_bit_end
  • post_thanks_function_fetch_post_thanks_template_start
  • post_thanks_function_fetch_post_thanks_template_end
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete