Looks like my forum hacked, need your assistance

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • _Avalon_
    Member
    • Dec 2012
    • 88
    • 4.2.X

    [Forum] Looks like my forum hacked, need your assistance

    Good day

    From yestarday i noticed, that when you open forum, first click on any link/item will open some advertisement window. Please advise what actions should I take to find where is this "Malicious code"? How to find and delete it?

    Many thanks in advance for yor suggestions.
  • Mattwhf
    Senior Member
    • May 2016
    • 124
    • 4.2.x

    #2
    You can not guess, some addons that you installed on your browser can advertise unwanted ad.

    If you are not sure about that, using a software or tool to scan your site.

    Some tools and software to scan malware/virus mentioned here https://forumweb.hosting/15447-linux...e-scanner.html

    Other than that, you can read this thread https://www.vbulletin.com/forum/foru...-patch-level-4 to find out many ways to solve your problem.

    Hope that helps!
    Last edited by Mattwhf; Wed 12 Apr '17, 3:31am.
    Web Hosting Forum - Learn web hosting and offering your web hosting plans for free!
    Tranh phong cảnh, tranh nghệ thuật đẹp, bếp từ nhập khẩu chất lượng cao!

    Comment

    • _Avalon_
      Member
      • Dec 2012
      • 88
      • 4.2.X

      #3
      Thanks for your suggestions! Just find out that file clientscript/yui/connection/connection-min.js was edited by somebody (some strange additional line of code). I've changed in control panel YUI (Yahoo! User Interface Library) to Google and Ads disapered from forum, but still appears during using control panel

      Comment

      • Wayne Luke
        vBulletin Technical Support Lead
        • Aug 2000
        • 73981

        #4
        You should upload a new set of files from the Member's Area.
        If you are not using 4.2.4, you should upgrade immediately.
        You should make sure that there are no extra files in your vBulletin directory on the server.
        You should change your passwords to your site.
        You should not access your site using FTP. You should use SFTP.

        This topic will tell you how to secure your vBulletin installation: https://www.vbulletin.com/forum/foru...ring-your-site

        Translations provided by Google.

        Wayne Luke
        The Rabid Badger - a vBulletin Cloud demonstration site.
        vBulletin 5 API

        Comment

        widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
        Working...