Virus in MYBB site help ASAP - Printable Version

Virus in MYBB site help ASAP - Printable Version

+- MyBB Community Forums (https://community.mybb.com)
+-- Forum: Community Archive (https://community.mybb.com/forum-106.html)
+--- Forum: Archived Forums (https://community.mybb.com/forum-143.html)
+---- Forum: Archived Development and Support (https://community.mybb.com/forum-155.html)
+----- Forum: MyBB 1.6 (https://community.mybb.com/forum-138.html)
+------ Forum: 1.6 Security Management and Support (https://community.mybb.com/forum-153.html)
+------ Thread: Virus in MYBB site help ASAP (/thread-105770.html)

Pages: 1 2 3 4 5

RE: Virus in MYBB site help ASAP - pavemen - 2011-10-13

444 is fine for the config as long as the webserver can read it, since that file is static once MyBB install is done. the bad file is index.php

RE: Virus in MYBB site help ASAP - hon0r - 2011-10-13

I fixed it. But, config file was 777 before...

RE: Virus in MYBB site help ASAP - pavemen - 2011-10-13

so what if it was 777, make it the least level of permissions that allows the site to still work. basically it is world readable and with the injections you have, they could be outputting config data that has db info, etc.

RE: Virus in MYBB site help ASAP - hon0r - 2011-10-13

I mean like why would it have randomly cahnged?

RE: Virus in MYBB site help ASAP - pavemen - 2011-10-13

i dont know, but i would suggest that you clean your computer and then change your passwords

RE: Virus in MYBB site help ASAP - hon0r - 2011-10-13

mi basicly screwed is there any way to find out who did this? and if it can happen again and it if is fixed

RE: Virus in MYBB site help ASAP - crazy4cs - 2011-10-13

Check logs if you have cPanel. Also, if you have your site already on www.google.com/webmaster you can go there and go to Malware tab and Google would analyze and tell you if they found any malwares in your site.

And CHMOD your config.php file to 666, 777 is dangerous and gives one full permissions.

RE: Virus in MYBB site help ASAP - pavemen - 2011-10-13

(2011-10-13, 05:23 AM)Bapun Raz Wrote: evrything is fine here.its coming fine for me when browsing as a guest.

but view the source and you will see all kinds of base64 decode strings

RE: Virus in MYBB site help ASAP - hon0r - 2011-10-13

Got people to scan / try to hack it. Nothing came up. It's clean. Must have been something with mybb. earlier

RE: Virus in MYBB site help ASAP - crazy4cs - 2011-10-13

(2011-10-13, 05:28 AM)hon0r Wrote: Got people to scan / try to hack it. Nothing came up. It's clean. Must have been something with mybb. earlier

MyBB doesn't remotely change or make edits to your forum, you probably gotta find template and fix them.