Go Back   vb.org Archive > vBulletin 4 Discussion > vB4 General Discussions
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 12-13-2011, 03:27 PM
HellRZR HellRZR is offline
 
Join Date: Feb 2011
Posts: 124
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Virus or Maleware URL?

Several user are reporting that there anti-virus is reporting the following virus or malware URL when accessing our website, any ideas?

URL: http://kokosina.in/t/go.php?sid
processus: file://C:\Program Files (x86)\Internet E...
infection: al

When I access the website, my anti-virus doesn't report a problem, confused...

Thanks,
Reply With Quote
  #2  
Old 12-13-2011, 06:39 PM
Monteduro Monteduro is offline
 
Join Date: Jun 2011
Posts: 1
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Same problem. Help pls
Reply With Quote
  #3  
Old 12-14-2011, 10:08 PM
abqtj abqtj is offline
 
Join Date: Nov 2008
Posts: 102
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I've been getting this as well

I did find a file/page uploaded to my forum, the last part of the url is oshit.htm. I deleted it from the site, but don't know what else I need to do.
Reply With Quote
  #4  
Old 12-15-2011, 01:12 AM
Big Al Big Al is offline
 
Join Date: Nov 2011
Posts: 54
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Report 2011-12-13 03:31:15 (GMT 1)
Website kokosina.in
Domain Hash 8450f7c8c83309270724a0c49e82dc1f
IP Address 46.37.184.227 [SCAN]
IP Hostname 46-37-184-227.static.hostnoc.net
IP Country -- (--)
AS Number 51377
AS Name BURSTNETLTD BurstNET Limited
Detections 2 / 23 (9 %)
Status SUSPICIOUS

Scanning site with: SpamhausDBL DETECTED

Scanning site with: Threat Log DETECTED

As suspected, a scan shows it is viral. You may need to update your Av or change to another one.
Reply With Quote
  #5  
Old 12-15-2011, 02:36 PM
abqtj abqtj is offline
 
Join Date: Nov 2008
Posts: 102
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Big Al View Post
As suspected, a scan shows it is viral. You may need to update your Av or change to another one.
I don't get what you are saying...*I* don't have the virus, my site does.

--------------- Added [DATE]1324046269[/DATE] at [TIME]1324046269[/TIME] ---------------

anyone have some suggestions??

Can I just upgrade my vb version and be fine, or other steps to take??
Reply With Quote
  #6  
Old 12-16-2011, 01:44 PM
BirdOPrey5's Avatar
BirdOPrey5 BirdOPrey5 is offline
Senior Member
 
Join Date: Jun 2008
Location: New York
Posts: 10,610
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Run the suspect file check in Admin CP -> Maintenance and see if any other files shouldn't be there.

Have you kept up to date on security patches?
Reply With Quote
  #7  
Old 12-22-2011, 03:05 AM
Sulley007 Sulley007 is offline
 
Join Date: Feb 2009
Posts: 10
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I'm having the same issues.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 09:43 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.05303 seconds
  • Memory Usage 2,217KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (7)post_thanks_box
  • (7)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (7)post_thanks_postbit_info
  • (7)postbit
  • (7)postbit_onlinestatus
  • (7)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete