[Forum hacked] redirect to .ru pages

[papclems]

frmo this morning, my forum

www.fantanba.net/forum as the following problem, in the forum it's signaled by antivirus that there's a malware to mediquil.ru or offeeemedic


when i access in the admin cp, and try to activate a new user, i redirect me directly to those websites (but my AV block the redirect).

Please help me.

[illusionalp]

can you provide the link that you are getting redirected to ?
what your anti virus says(phising page) ?
what is the action you do to get redirected ? (explain more)

[papclems]

ty illusionalp

when i try to activate a user i redirect me here

http://offeemedic.com/


my antivirus block the page, because it's a phising page


some users tell me that their antivirus signal that tere's a malware in the forum when they access.

[Jelo]

This user has been denied support.

A spam bot on your forum has that site on their profile or they posted somewhere on your forum.

[illusionalp]

^agree
try to active different users this won't happen it is just couple of spam bots when you try to activate them they redirect you there here is some tips how to get rid of them
1-http://mods.mybb.com/download/registration-security-question
2-ACP>Configuration>User Registrations & Profile Option>Maximum Registrations Per IP>set to 1
3-this plugin will delete any threads/posts that the bot has created http://mods.mybb.com/view/goodbye-spammer
4-http://mods.mybb.com/view/stopforumspam-com-for-mybb it will check the stopforumspam.com database if the username exist there
5-http://mods.mybb.com/view/fassim-anitspam it will stop the bots from regiserting throw some isp/ips

[papclems]

but i redirects me also if i try to navigate through my admin cp pages...

[illusionalp]

weird i don't think that you trust me enough to give me access so pm the support team

[Paul H.]

Do you use the FB connect plugin?

[papclems]

i 've very few plugins, about fb not the login i think but one to share.

---

I check the plugins all seems to be ok, but now the problem is very big, but quite all in the admin cp.

When i access to the admin cp, i cannot do anything, if i try to navigate through the different pages of the admin cps i'm redirect always to this two viagras website. No way to do something in the admin.



www.fantanba.net/forum (link at the forum)

[Diminished]

What's in your .htaccess file in both the mybb root directory and /admin?