Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 24 Mar 2017, 16:21
SVTCobraLTD SVTCobraLTD is offline
 
Join Date: Jul 2007
Site Help: Hacked

Google sent me a notice that my site has been hacked. I have been trying to replace files to eliminate the issue but I have had no luck. I signed up for SiteLock and they did a scan but said it is deeply rooter, whatever that means. I am in need of help to find the issue and get this resolved. Any help or route I can take to get help would be greatly appreciated. Thank you.

www.PennMustangs.com
Reply With Quote
  #2  
Old 24 Mar 2017, 16:26
Dave Dave is offline
 
Join Date: Jun 2010
Real name: Dave
It's a bit hard to tell from our position, it could be hidden in plugins, files, hooks, etc.

You might want to create a paid service request here: http://www.vbulletin.org/forum/forumdisplay.php?f=30
__________________
https://technidev.com - security, development, exploits, vBulletin
dave[at]technidev[dot]com

Contact me for custom vBulletin 3/4 work & server/website management.
Reply With Quote
  #3  
Old 25 Mar 2017, 02:06
blind-eddie's Avatar
blind-eddie blind-eddie is offline
 
Join Date: Apr 2006
Real name: Tim
What made google think your site was hacked?

I registered to your site, seems as if you are having www issues as well. I was having issue surfing your site until I removed www from the URL.
I am not staying logged in anywhere.

Also, you are using vbadvanced v3.1.0. It is a vulnerability and you need to update it to 3.2.3

I would like to help you out, free of charge.
__________________
LONG LIVE 3.8 SERIES
National Arcade Competition Club- NACC All arcade edits will work on vb4.
Check out my heavily modified ibproarcade with over 50,000 games for you, free of charge!
Exclusive arcade addons, edits and skins were made by stangger5 owner of Next Level Arcade
Reply With Quote
  #4  
Old 25 Mar 2017, 10:08
Kane@airrifle's Avatar
Kane@airrifle Kane@airrifle is offline
 
Join Date: Jun 2011
Real name: Kane
filestore72 infection...

Resources:
https://www.vbulletin.com/forum/foru...lestore72-info

https://clients.urljet.com/knowledge...version-2.html

https://clients.urljet.com/knowledge...e123-Hack.html
Reply With Quote
  #5  
Old 27 Mar 2017, 13:56
SVTCobraLTD SVTCobraLTD is offline
 
Join Date: Jul 2007
Originally Posted by blind-eddie View Post
What made google think your site was hacked?
I got an email about this from them regarding this.


I registered to your site, seems as if you are having www issues as well. I was having issue surfing your site until I removed www from the URL.
I am not staying logged in anywhere.
Not sure how to resolve this?


Also, you are using vbadvanced v3.1.0. It is a vulnerability and you need to update it to 3.2.3
I tried updating but keeping getting this error.

Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

--------------- Added 27 Mar 2017 at 13:57 ---------------

Thank you. I am working through these.
Reply With Quote
  #6  
Old 27 Mar 2017, 14:26
blind-eddie's Avatar
blind-eddie blind-eddie is offline
 
Join Date: Apr 2006
Real name: Tim
Delete this line of code in the install file and try again


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Also, change all instances of TYPE=MyISAM; to ENGINE=MyISAM;
__________________
LONG LIVE 3.8 SERIES
National Arcade Competition Club- NACC All arcade edits will work on vb4.
Check out my heavily modified ibproarcade with over 50,000 games for you, free of charge!
Exclusive arcade addons, edits and skins were made by stangger5 owner of Next Level Arcade
Reply With Quote
  #7  
Old 27 Mar 2017, 19:23
SVTCobraLTD SVTCobraLTD is offline
 
Join Date: Jul 2007
Originally Posted by blind-eddie View Post
Delete this line of code in the install file and try again


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.
That gives me this error now...
Parse error: syntax error, unexpected '}' in /home1/XXX/public_html/forums/admincp/vbacmps_install.php on line 3608
Reply With Quote
  #8  
Old 27 Mar 2017, 19:26
MarkFL's Avatar
MarkFL MarkFL is offline
 
Join Date: Feb 2014
Real name: Mark
Try removing the closing bracket that was associated with the if statement you removed.
__________________
Former vBulletin.org Staff Member



Support for my products (as well as updates/new product publishing) has been moved to MHB - vBulletin Products and TAZ - Add-ons
Reply With Quote
  #9  
Old 27 Mar 2017, 19:53
blind-eddie's Avatar
blind-eddie blind-eddie is offline
 
Join Date: Apr 2006
Real name: Tim
Sorry, this is what needs removed from the install file


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

__________________
LONG LIVE 3.8 SERIES
National Arcade Competition Club- NACC All arcade edits will work on vb4.
Check out my heavily modified ibproarcade with over 50,000 games for you, free of charge!
Exclusive arcade addons, edits and skins were made by stangger5 owner of Next Level Arcade
Reply With Quote
  #10  
Old 27 Mar 2017, 20:18
SVTCobraLTD SVTCobraLTD is offline
 
Join Date: Jul 2007
Originally Posted by blind-eddie View Post
Sorry, this is what needs removed from the install file


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Still not working.
Reply With Quote
  #11  
Old 27 Mar 2017, 20:26
blind-eddie's Avatar
blind-eddie blind-eddie is offline
 
Join Date: Apr 2006
Real name: Tim
My offer stands as stated in my 1st post, I will help you, free of charge.

If you want free help with your issues, set my account on your site with full acp access and set up a temporary FTP account and pm me the info.
__________________
LONG LIVE 3.8 SERIES
National Arcade Competition Club- NACC All arcade edits will work on vb4.
Check out my heavily modified ibproarcade with over 50,000 games for you, free of charge!
Exclusive arcade addons, edits and skins were made by stangger5 owner of Next Level Arcade
Reply With Quote
  #12  
Old 28 Mar 2017, 11:33
SVTCobraLTD SVTCobraLTD is offline
 
Join Date: Jul 2007
Originally Posted by blind-eddie View Post
My offer stands as stated in my 1st post, I will help you, free of charge.

If you want free help with your issues, set my account on your site with full acp access and set up a temporary FTP account and pm me the info.
Thank you. I would like to work through this so I can learn. My biggest issue is not knowing if it is removed or not. My next step is just completely replacing every file/plugin to insure the issue is removed.
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 20:18.

Layout Options | Width: Wide Color: