Virus Check? 13798 Threats found?

[Steverd]

Can anyone browse by my forums and see if you get a virus report?
It's only a few days old with just one message, so it seems strange when I got an email from one of my customers that Norton's Antivirus reported
13798 threats.


I use Avast and Malwarebytes on my computer at home and so far no reports of any problems.

Suggestions?
Thanks,
Steve


Here is a sample: Threat Name: Trojan.Maliframe!html Location: http://www.reedsgrnh.com/forums/privmsg.php?mode=post&u=31&sid=958a866a5caf5871ee0f8002f1702b11

[Trevor Hannant]

privmsg.php is not a vBulletin file and is not included in the default vBulletin package.

If that file exists on your server then you need to find out where it came from, get rid of it then tighten up your server security.

[Winner™]

I use antivirus Nod32 and it has not shown me any threats at your forum.
By the way, pages catch through <iframe> more often, I have looked a code of your page and anything similar have not found.
So do not worry, your forum is pure, as tear of the baby.

[beishe8]

Can anyone browse by my forums and see if you get a virus report?
It's only a few days old with just one message, so it seems strange when I got an email from one of my customers that Norton's Antivirus reported
13798 threats.

My forum is at: www.reedsgreenhouse.com/forums

I use Avast and Malwarebytes on my computer at home and so far no reports of any problems.

Suggestions?
Thanks,
Steve


Here is a sample: Threat Name: Trojan.Maliframe!html Location: http://www.reedsgreenhouse.com/forums/privmsg.php?mode=post&u=31&sid=958a866a5caf5871ee0f8002f1702b11

http://www.google.com.au/search?hl=e...&meta=&aq=f&oq=

Yes, in Norton's opinion your site is badly infected.
Did you play with some modifications earlier?

[Steverd]

No, so far the only thing added to the forums is two skins from
VBSkinworks.

Steve

http://www.google.com.au/search?hl=e...&meta=&aq=f&oq=

Yes, in Norton's opinion your site is badly infected.
Did you play with some modifications earlier?

[Steverd]

Just checked also and did not find the file: privmsg.php anyplace
in my ftp folders. As for the servers, I'm hosted through 1and1.com and
know it's shared server space. Could someone else's domain on the same server cause an infection to my files?

Thanks,
Steve

privmsg.php is not a vBulletin file and is not included in the default vBulletin package.

If that file exists on your server then you need to find out where it came from, get rid of it then tighten up your server security.

[Homeworld'sa]

Nope. And I would go with another host, like startlogic.com. They're very good My forums are hosted with them

[Steverd]

Thanks for the help everyone.

I requested a new scan from Nortons websafe and now they report
ZERO viruses!

Thanks,
Steve

[Wayne Luke]

Could someone else's domain on the same server cause an infection to my files?

Actually it can if the server is infected through another vector. This has happened in the past with a phpBB Worm that used an exploit in an older version of PHP and the Gumblar virus recently.

Any shared server that isn't kept up to date with all patches to the OS and various server applications (email, FTP, HTTP, PHP, MySQL, etc...) can become a target.