Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 26 Nov 2013, 21:10
steve3402000's Avatar
steve3402000 steve3402000 is offline
 
Join Date: Nov 2004
Real name: Steve
Post Hacked a Bunch of Times c99madshell.php

Apparently this is a quite sophisticated Trojan Horse. I actually found it by accident. Had no idea it was there. Anyone know how to get rid of it?

Steve
Reply With Quote
  #2  
Old 26 Nov 2013, 22:51
Lynne's Avatar
Lynne Lynne is offline
 
Join Date: Sep 2004
Real name: Lynne
Did you try google? First thread I saw - http://www.securelist.com/en/descriptions/old188613
__________________
Former vBulletin.org Staff Member

Try a search before posting for help. Many users won't, and don't, help if the question has been answered several times before.
W3Schools -
Online vBulletin Manual
If I post some CSS and don't say where it goes, put it in the additional.css template.
I will NOT help via PM (you will be directed to post in the forums for help.)
Reply With Quote
  #3  
Old 26 Nov 2013, 23:06
steve3402000's Avatar
steve3402000 steve3402000 is offline
 
Join Date: Nov 2004
Real name: Steve
Problem I have, is it was a plug in, I don't even know the files that are attached to it, and I am on a hosted Server. I see nothing in my directories.

Just weird, anyone else had this one?

Thanks Lynne

--------------- Added 26 Nov 2013 at 23:10 ---------------

I made a php error log here are some errors I get, especially when I try to access phpmyadmin

This craps killin me, I am too busy at work for this lol



Warning: Declaration of vBForum_Item_SocialGroupMessage::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in /packages/vbforum/item/socialgroupmessage.php on line 261
Date: Tuesday 26th of November 2013 07:34:12 AM
Username: Unregistered
IP Address: 138.163.0.41

=====================================================

Warning: Declaration of vBForum_Item_SocialGroupDiscussion::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in /packages/vbforum/item/socialgroupdiscussion.php on line 337
Date: Tuesday 26th of November 2013 07:34:12 AM
Username: Unregistered
IP Address: 138.163.0.41

=====================================================

Warning: Only variables should be passed by reference in /newreply.php on line 389
Date: Tuesday 26th of November 2013 09:05:56 AM
Username: Hitech
IP Address: 50.79.79.193

=====================================================

Warning: Only variables should be passed by reference in /newreply.php on line 389
Date: Tuesday 26th of November 2013 09:05:57 AM
Username: Hitech
IP Address: 50.79.79.193

=====================================================

Warning: Only variables should be passed by reference in /editpost.php on line 323
Date: Tuesday 26th of November 2013 09:45:32 AM
Username: GlennAB1
IP Address: 76.251.228.156

=====================================================

Warning: Declaration of vBForum_Item_SocialGroupMessage::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in /packages/vbforum/item/socialgroupmessage.php on line 261
Date: Tuesday 26th of November 2013 10:34:32 AM
Username: Unregistered
IP Address: 181.246.240.142

=====================================================

Warning: Declaration of vBForum_Item_SocialGroupDiscussion::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in /packages/vbforum/item/socialgroupdiscussion.php on line 337
Date: Tuesday 26th of November 2013 10:34:33 AM
Username: Unregistered
IP Address: 181.246.240.142

=====================================================

Warning: Declaration of vBForum_Item_SocialGroupMessage::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in /packages/vbforum/item/socialgroupmessage.php on line 261
Date: Tuesday 26th of November 2013 01:25:01 PM
Username: Unregistered
IP Address: 134.216.26.233

=====================================================

Warning: Declaration of vBForum_Item_SocialGroupDiscussion::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in /packages/vbforum/item/socialgroupdiscussion.php on line 337
Date: Tuesday 26th of November 2013 01:25:01 PM
Username: Unregistered
IP Address: 134.216.26.233

=====================================================

Warning: Declaration of vBForum_Item_SocialGroupMessage::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in /packages/vbforum/item/socialgroupmessage.php on line 261
Date: Tuesday 26th of November 2013 01:25:10 PM
Username: Unregistered
IP Address: 134.216.26.233

=====================================================

Warning: Declaration of vBForum_Item_SocialGroupDiscussion::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in /packages/vbforum/item/socialgroupdiscussion.php on line 337
Date: Tuesday 26th of November 2013 01:25:10 PM
Username: Unregistered
IP Address: 134.216.26.233

=====================================================

Warning: Declaration of vBForum_Item_SocialGroupMessage::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in /packages/vbforum/item/socialgroupmessage.php on line 261
Date: Tuesday 26th of November 2013 01:25:18 PM
Username: Unregistered
IP Address: 134.216.26.233

=====================================================

Warning: Declaration of vBForum_Item_SocialGroupDiscussion::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in /packages/vbforum/item/socialgroupdiscussion.php on line 337
Date: Tuesday 26th of November 2013 01:25:18 PM
Username: Unregistered
IP Address: 134.216.26.233

=====================================================

Warning: Only variables should be passed by reference in /newreply.php on line 389
Date: Tuesday 26th of November 2013 01:33:37 PM
Username: Steve340
IP Address: 70.209.17.110

=====================================================

Warning: Only variables should be passed by reference in /newreply.php on line 389
Date: Tuesday 26th of November 2013 01:42:34 PM
Username: Steve340
IP Address: 70.209.17.110

=====================================================

Warning: Only variables should be passed by reference in /newreply.php on line 389
Date: Tuesday 26th of November 2013 01:48:08 PM
Username: Steve340
IP Address: 70.209.17.110

=====================================================

Warning: Only variables should be passed by reference in /newreply.php on line 389
Date: Tuesday 26th of November 2013 02:44:44 PM
Username: Gonzo3333
IP Address: 98.213.198.34

=====================================================

Warning: Only variables should be passed by reference in /newreply.php on line 389
Date: Tuesday 26th of November 2013 03:16:31 PM
Username: Steve340
IP Address: 70.209.17.110

=====================================================

Warning: Only variables should be passed by reference in /newreply.php on line 389
Date: Tuesday 26th of November 2013 03:20:44 PM
Username: Steve340
IP Address: 70.209.17.110

=====================================================
Reply With Quote
  #4  
Old 27 Nov 2013, 04:43
Lynne's Avatar
Lynne Lynne is offline
 
Join Date: Sep 2004
Real name: Lynne
If it's a plugin, then there is no need for a file. But, you should make sure there isn't some file they uploaded via the use of a plugin.

Those errors are just showing warnings. And, if they are using a script, then that doesn't mean it is generating any errors that would show up in an error_log. You really need to look at your access_logs to see if they are accessing any scripts on your server that you don't know about.
__________________
Former vBulletin.org Staff Member

Try a search before posting for help. Many users won't, and don't, help if the question has been answered several times before.
W3Schools -
Online vBulletin Manual
If I post some CSS and don't say where it goes, put it in the additional.css template.
I will NOT help via PM (you will be directed to post in the forums for help.)
Reply With Quote
  #5  
Old 27 Nov 2013, 05:01
ForceHSS's Avatar
ForceHSS ForceHSS is offline
 
Join Date: Apr 2008
going by some of the warnings you are getting you have not put any fixes in yet for 4.2.2
Reply With Quote
  #6  
Old 27 Nov 2013, 08:27
steve3402000's Avatar
steve3402000 steve3402000 is offline
 
Join Date: Nov 2004
Real name: Steve
Thanks people !

I did not know there were fixes for 4.2.2 I will check it out.

Thanks!

Steve
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 07:32.

Layout Options | Width: Wide Color: