What is that files ???

[Bulent Tekcan]

Today convert my friends forum ibb1.3 to vb3.5.2 and somebody come in,register and get the admin account.I'm already search all system but not found any infected files.

But I heard before,this problem effected converted board,not new install.

Than I find these file in forum directory

vbidPf3b
vbt5cy57
vbndzLXi
vbikoQx3
vb3Y9GOj
vbJi0IlK

And 15-20 files like that,I deleted these files and protect admin and mod area.But before only protect admin area.I checked logs every action from modcp.

That guys delete 40-45 thread already..

Any idea for that..

[Floris]

There is no known security issue with 3.5.2, so I have no idea how this can be. Do you have any public folders set to chmod 777? Did another version prior to 3.5.2 run, or was the 3.5.2 a fresh install.

Additionally: We can't give you support. Your friend might be licensed, he might not be. We simply can't tell. Let him ask for support himself please.

[Scott MacVicar]

Sounds like you have the safe directory for vB files set wrong, they would be image manipulation files created by vBulletin.