Last night a virus, called JS:Illredir-BY[Trj] infected my site (all the index*, default* and .js files). I just want to know what a hell is that?
Btw my site is already clean, thanks to my webhost.
If you have a copy of the files you can scan them with
http://winpulse.net to see if it's an actually virus. I bet it's some code that allows backdoor access.
Most likely something totally unrelated to MyBB. Googling for it returns loads of results. Anything helpful in the access logs??
Do you mean raw-access logs? Nothing. Just my ip in the cpanel logins.
Sorry for this. Now i know a virus infected my pc and then uploaded the script with my ftp soft.
Not really sure what we can do then. I'd upload all fresh files and go through all directories to make sure there's no rouge files, and change your FTP password etc.
And if i upload fresh files, what about the plugins?
You'd have to upload fresh copies of plugin files as well.
I checked all the files with Symantec antivirus. No virus.
I think my webhost was replaced the files with a backup.
Make sure to change your passwords on FTP, MySQL, cPanel, etc.