Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 02-25-2013, 01:48 PM
hodgy hodgy is offline
 
Join Date: Feb 2011
Posts: 4
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Virus Alerts! HELP

Starting to pull my hair out. First off, I am not versed in the software but have people to help me with it.

In the past month my members virus alerts have been going off the hook when they visit the site and every page. It stopped for a week and then started up again. We have checked everything and even updated the software 3.8.7. My guy tells me it's all clear, but members are panicking and now my advertisers are questioning the integrity of the forum.

The site is www.yamahamotorcycleforum.com

I started a thread and this is what members are posting when their virus alerts go off.

Parent Pro
cess: C:\Program Files (x86)\Internet Explorer\iexplore.exe
File: C:\Users\Pappy\AppData\Local\Microsoft\Windows\Tem porary Internet Files\Low\Content.IE5\MFE8V351\js[1].htm

file:C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\KC2IK8JH\js[1].htm

Parent Process: C:\Program Files (x86)\Internet Explorer\iexplore.exe
File: C:\Users\Pappy\AppData\Local\Microsoft\Windows\Tem porary Internet Files\Low\Content.IE5\MFE8V351\js[1].htm

FilePath="C:\Users\Owner\AppData\Local\Microsoft\W indows\Temporary Internet Files\Low\Content.IE5\U7F1CY6P\js[1].htm"

and so on.

This last week I have also been getting loads of "auto response" emails sent to our email address even though we do not send emails out. The people receiving these emails are not members, so someone or some software is using our email address as the return.

this is getting very very frustrating. Any help would be greatly appreciated.
Reply With Quote
  #2  
Old 02-25-2013, 06:44 PM
Lynne's Avatar
Lynne Lynne is offline
 
Join Date: Sep 2004
Location: California/Idaho
Posts: 41,180
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Have you talked to your host about this?
Reply With Quote
  #3  
Old 02-26-2013, 01:03 PM
Simon Lloyd's Avatar
Simon Lloyd Simon Lloyd is offline
 
Join Date: Aug 2008
Location: Manchester
Posts: 3,481
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Your server or vb installation has been compromised, somewhere you have/had a vulnerability which has been exploited, search your files and compare them against stock vb files are there any file names that dont belong?, in admincp run the maintainance tool for suspect versions and see what comes up.
Reply With Quote
  #4  
Old 02-26-2013, 01:12 PM
hodgy hodgy is offline
 
Join Date: Feb 2011
Posts: 4
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Ok, will do. Thanks.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 02:31 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.03634 seconds
  • Memory Usage 2,183KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (4)post_thanks_box
  • (4)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (4)post_thanks_postbit_info
  • (4)postbit
  • (4)postbit_onlinestatus
  • (4)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete