XF 1.5 How to trace infected attachment file to content ?

Alfa1

Well-known member
#1
I have the file name and location of an infected attachment. I need to find the associated content.
In the database in xf_attachment I have found the related row, so I now have data_id, attachment_id, content_id. It is a resource_verion.
How do I get to the content to delete it without opening the file?
 

Brogan

XenForo moderator
Staff member
#2
You can delete the resource update which will remove the file from the server without you having to open it.
 

Alfa1

Well-known member
#4
/community/resources/X/
(where X is the content_id)
Gives an error.

EDIT:
Never mind! Its clear to me now. The content doesn't seem to exist while the files are there.
 

Snog

Well-known member
#5
/community/resources/X/
(where X is the content_id)
Gives an error.

EDIT:
Never mind! Its clear to me now. The content doesn't seem to exist while the files are there.
Are you sure it's a resource and not an attachment to a thread?
 

Brogan

XenForo moderator
Staff member
#6
I assumed you knew which resource it was - how did you identify an infected file?

Files should be removed from the server (via cron) if the parent content is deleted.

It would be worth finding out why there is an orphaned attachment in the file system.

You may also be able to locate it using the attachment browser in the ACP.
 

Alfa1

Well-known member
#7
The server antivirus alerted me to infected files. All resources. As I could find the content_id I could locate one of the resources and delete it. I then searched the database for the remaining resources by content_id. It turned out these were in a private node which I as superadmin had no access to.
 
Top