Go Back   vb.org Archive > vBulletin 4 Discussion > vB4 General Discussions
Reload this Page 4.2.1 PL1 hacked, what to look for in logs
FAQ Community Calendar Today's Posts Search

Reply
Page 2 of 5 1 2 34 Last »
 
Thread Tools Display Modes
  #11  
Old 08-10-2014, 06:02 PM
ForceHSS ForceHSS is offline
 
Join Date: Apr 2008
Posts: 6,357
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Check admincp/Plugins & Products/Plugin Manager many people don't look in there so its always over loooked
Reply With Quote
  #12  
Old 08-10-2014, 06:13 PM
ifitsmedia ifitsmedia is offline
 
Join Date: Jul 2010
Posts: 102
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
I installed Search Plugins and ran a few searches including base64, nothing turned up. Any other terms I should search for?

With the exception of Tapatalk, all mods I am using are from vbulletin.org and DB Tech. They are:

https://vborg.vbsupport.ru/showthread.php?t=228825
https://vborg.vbsupport.ru/misc.php?...id=chgtpowner4
https://vborg.vbsupport.ru/showthread.php?t=256383
https://vborg.vbsupport.ru/misc.php?...=forumtags_vb4
https://vborg.vbsupport.ru/misc.php?...d=ms_fwsfut_40
https://vborg.vbsupport.ru/showthread.php?t=248042
https://vborg.vbsupport.ru/showthrea...237650&page=10
https://vborg.vbsupport.ru/showthread.php?t=235841
https://vborg.vbsupport.ru/showthread.php?t=236127
https://vborg.vbsupport.ru/showthread.php?t=233309

http://www.dragonbyte-tech.com/produ...?dbtech_thanks
http://www.dragonbyte-tech.com/produ...dbtech_usertag
http://www.dragonbyte-tech.com/produ...ch_ajaxthreads
http://www.dragonbyte-tech.com/produ...tech_copyright
http://www.dragonbyte-tech.com/produ...ch_ajaxthreads
http://www.dragonbyte-tech.com/product.php?dbtech_dbseo

--------------- Added [DATE]1407698059[/DATE] at [TIME]1407698059[/TIME] ---------------

Thanks ForceHSS, I did check in plugin manager and don't see anything unusual.
Reply With Quote
  #13  
Old 08-10-2014, 06:15 PM
ozzy47's Avatar
ozzy47 ozzy47 is offline
 
Join Date: Jul 2009
Location: USA
Posts: 10,929
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Hmmm, none of those mods have any issues that I have ever heard of.
Reply With Quote
  #14  
Old 08-10-2014, 06:17 PM
ozzy47's Avatar
ozzy47 ozzy47 is offline
 
Join Date: Jul 2009
Location: USA
Posts: 10,929
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Try installing this mod, and see if it turns up anything, https://vborg.vbsupport.ru/showthread.php?t=304190
Reply With Quote
  #15  
Old 08-10-2014, 06:25 PM
ifitsmedia ifitsmedia is offline
 
Join Date: Jul 2010
Posts: 102
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Quote:
Originally Posted by ozzy47 View Post
Try installing this mod, and see if it turns up anything, https://vborg.vbsupport.ru/showthread.php?t=304190
That does turn up a number of warnings, but they are not specific as to why.

It seems to check for anything modified within the past 3 months, which happens to be a lot because I have been doing updates recently.
Reply With Quote
  #16  
Old 08-10-2014, 06:28 PM
ozzy47's Avatar
ozzy47 ozzy47 is offline
 
Join Date: Jul 2009
Location: USA
Posts: 10,929
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Correct, so if you see something that has been modified, and you don't remember modifying it, best to check into it.
Reply With Quote
  #17  
Old 08-10-2014, 06:30 PM
ifitsmedia ifitsmedia is offline
 
Join Date: Jul 2010
Posts: 102
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Checking them all now, nothing amiss so far.
Reply With Quote
  #18  
Old 08-10-2014, 06:32 PM
ozzy47's Avatar
ozzy47 ozzy47 is offline
 
Join Date: Jul 2009
Location: USA
Posts: 10,929
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
When is the last time you updated TapaTalk, I remember there was a vulneribility in it back in May or so.
Reply With Quote
  #19  
Old 08-10-2014, 06:34 PM
ozzy47's Avatar
ozzy47 ozzy47 is offline
 
Join Date: Jul 2009
Location: USA
Posts: 10,929
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Also have you checked your notices to see if there is anything in there?
Reply With Quote
  #20  
Old 08-10-2014, 06:34 PM
ifitsmedia ifitsmedia is offline
 
Join Date: Jul 2010
Posts: 102
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Under 'Forums' that mod tells me "4 forums contain potentially malicious code" - but I have no idea why or how to check them. All the other warnings seem to be false positives.

I have scanned all files with ClamAV and Sucuri server side scanner, nothing turned up.

--------------- Added [DATE]1407699424[/DATE] at [TIME]1407699424[/TIME] ---------------

Tapatalk is currently the latest version. I upgraded it a few weeks before any of the problems started. Before that I was running an older version of it for a while.

Nothing unusual in notices, only the ones that I made.
Reply With Quote
Reply
Page 2 of 5 1 2 34 Last »

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT. The time now is 06:20 AM.

Contact Us - Archive - Top

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.07783 seconds
  • Memory Usage 2,257KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 
Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete