Go Back   vb.org Archive > Community Discussions > Forum and Server Management
  #1  
Old 07-12-2010, 07:08 PM
FockerFGAA FockerFGAA is offline
 
Join Date: Dec 2006
Posts: 113
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Our site redirecting to some search engine

With users that have firefox they are coming to the site and then being redirected to yandex.com (some russian search engine). I have ran a virus scan on the site and it was clean. I ran a trojan scan and it can back with possibilities but nothing for sure. It only does it in firefox. It also pops up a malware issue for some users. I have tried refreshing my browser cache and it still does it. If you go to www.fvsports.com through firefox you will see what I am talking about. I have a deal open with my host, but if anyone here has a good idea of what it would be it would be greatly appreciated.
Reply With Quote
  #2  
Old 07-12-2010, 07:29 PM
apokphp apokphp is offline
 
Join Date: Nov 2002
Posts: 440
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by FockerFGAA View Post
With users that have firefox they are coming to the site and then being redirected to yandex.com (some russian search engine). I have ran a virus scan on the site and it was clean. I ran a trojan scan and it can back with possibilities but nothing for sure. It only does it in firefox. It also pops up a malware issue for some users. I have tried refreshing my browser cache and it still does it. If you go to www.fvsports.com through firefox you will see what I am talking about. I have a deal open with my host, but if anyone here has a good idea of what it would be it would be greatly appreciated.
Same thing is happening to my site as well.

What the hell is going on?
Reply With Quote
  #3  
Old 07-12-2010, 07:55 PM
benstillman benstillman is offline
 
Join Date: Jun 2007
Location: Ohio
Posts: 187
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

<a href="http://www.vbulletin.com/forum/showthread.php?357006-My-site-redirects-to-yandex.com" target="_blank">http://www.vbulletin.com/forum/showt...-to-yandex.com</a>
Reply With Quote
  #4  
Old 07-13-2010, 04:03 AM
Marco van Herwaarden Marco van Herwaarden is offline
 
Join Date: Jul 2004
Posts: 25,415
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

At vBulletin.com somone reports this is done in a modified functions_forumlist.php: http://www.vbulletin.com/forum/showt...=1#post2008127

Changed files usually indicate that the hosting account was compromised.

First step to take in a situation like this is look for changed files. This can be done from the AdminCP -> Maintenance -> Suspect File Versions.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 06:36 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04619 seconds
  • Memory Usage 2,180KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (4)post_thanks_box
  • (4)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (4)post_thanks_postbit_info
  • (4)postbit
  • (4)postbit_onlinestatus
  • (4)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete