Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 07-21-2012, 03:09 AM
GMan55 GMan55 is offline
 
Join Date: Jun 2011
Posts: 61
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Ads popping out of nowhere

Hi all. I was wondering if anyone can provide some insight to this. Since last 2-3 days, I have had several members complain that they are viewing ads in my forum (within the first and last post of every thread). But only a few members can see them and most others cannot. Ad blockers fixed the issue, but I'm wondering how the ads got there in the first place as there was no change done on my part in any way. My forum never had ads before. I would appreciate it if anyone can help me or provide any info. I can't see the ads myself, but some of my members sent me screenshots.

Any help would be highly appreciated.

EDIT:
Oops, I posted in VB3 instead of VB4 section by mistake. My version is 4.1.5
Reply With Quote
  #2  
Old 07-22-2012, 09:52 AM
ShawneyJ's Avatar
ShawneyJ ShawneyJ is offline
 
Join Date: Jul 2006
Location: Australia
Posts: 1,758
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

a link would be a huge help.
Reply With Quote
  #3  
Old 08-05-2012, 04:55 PM
GMan55 GMan55 is offline
 
Join Date: Jun 2011
Posts: 61
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Sorry for the delayed response.

My forum link is:
Code:
http://ftazeta.com
Apparently the ads appear on every first post and last post of a thread for some members. I personally can't see the ads at all and have never seen them, so I'm really confused as to what might be causing this. According to those members, the ads only appear on my forum.

Thank you again.
Reply With Quote
  #4  
Old 08-05-2012, 08:58 PM
christon26 christon26 is offline
 
Join Date: Dec 2008
Location: Australia
Posts: 174
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

My antivirus blocked your website as a potentially malicious site. You might have been hacked
Reply With Quote
  #5  
Old 08-06-2012, 03:19 AM
GMan55 GMan55 is offline
 
Join Date: Jun 2011
Posts: 61
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I figured it out. Someone actually put those ads in (silly me :P)! Disabled and they were gone... it seems we gave an admin account to someone undesired... All is good now and the account has been removed. Sorry about that.

@christon26: Really? Is there any way I can rectify this? But I doubt our forum is hacked. I feel like it could be due to issues with our service provider that we have been having recently.
Reply With Quote
  #6  
Old 08-06-2012, 03:27 AM
vijayninel's Avatar
vijayninel vijayninel is offline
 
Join Date: Mar 2009
Posts: 537
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Seems like your forum is hacked and the hackers are putting up their own ads.
Reply With Quote
Благодарность от:
GMan55
  #7  
Old 08-06-2012, 06:09 AM
christon26 christon26 is offline
 
Join Date: Dec 2008
Location: Australia
Posts: 174
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

It was Malwarebytes that blocked it, I'll have a look at my logs when I get back on my pc
Reply With Quote
Благодарность от:
GMan55
  #8  
Old 08-06-2012, 08:50 PM
GMan55 GMan55 is offline
 
Join Date: Jun 2011
Posts: 61
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

The ads were google ads. This sounds serious, if my forum could have been hacked. Is there any way I can confirm whether or not it has been hacked and how can I drive the hacker out? Thanks for all your help!
Reply With Quote
  #9  
Old 08-07-2012, 04:20 AM
christon26 christon26 is offline
 
Join Date: Dec 2008
Location: Australia
Posts: 174
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I'm sorry, I don't know, I wonder if it's possible that one of the ads may have triggered the Malwarebytes to block?

This is all that shows in the logs:
2012/08/06 07:57:25 +1000 LISSA-PC Lissa IP-BLOCK 79.142.72.93 (Type: outgoing, Port: 52964, Process: firefox.exe)
2012/08/06 07:57:58 +1000 LISSA-PC Lissa IP-BLOCK 79.142.72.93 (Type: outgoing, Port: 52971, Process: firefox.exe)

It blocks that specific IP each time I try to access your site, blocks it in IE too
Reply With Quote
  #10  
Old 08-07-2012, 10:44 PM
GMan55 GMan55 is offline
 
Join Date: Jun 2011
Posts: 61
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

OK, my forum has been hacked!!! Someone just made tons of Mods.

Any ideas on how to get rid of them?
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 12:02 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04590 seconds
  • Memory Usage 2,256KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)bbcode_code
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (10)post_thanks_box
  • (2)post_thanks_box_bit
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (2)post_thanks_postbit
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • fetch_musername
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • post_thanks_function_fetch_thanks_bit_start
  • post_thanks_function_show_thanks_date_start
  • post_thanks_function_show_thanks_date_end
  • post_thanks_function_fetch_thanks_bit_end
  • post_thanks_function_fetch_post_thanks_template_start
  • post_thanks_function_fetch_post_thanks_template_end
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete