[Forum] Virus on vB4?

[Kirsebom]

Hello!

I've been getting a lot of complaints of people getting a virus on my site, http://christianwomenonline.net/community

I recently removed the CMS and went to Wordpress for the root directory. I was getting a lot of complaints of a virus on the CMS and even got blocked by Google. I thought I got rid of the virus by removing the vB CMS, but 2 of my mods got virus's today from the vBulletin forum and blog areas.

I've scanned the site with: http://www.unmaskparasites.com/ and I cannot find anything.

I've been scanning the source code, and I can't find it. I myself run a mac and cannot replicate this virus.

What should I do?

Thanks,

Andy

[TheLastSuperman]

Hello!

I've been getting a lot of complaints of people getting a virus on my site, http://christianwomenonline.net/community

I recently removed the CMS and went to Wordpress for the root directory. I was getting a lot of complaints of a virus on the CMS and even got blocked by Google. I thought I got rid of the virus by removing the vB CMS, but 2 of my mods got virus's today from the vBulletin forum and blog areas.

I've scanned the site with: http://www.unmaskparasites.com/ and I cannot find anything.

I've been scanning the source code, and I can't find it. I myself run a mac and cannot replicate this virus.

What should I do?

Thanks,

Andy

There's a lot involved to make sure a site is properly clean, first thing to figure out is how did it get on there?

- Change all your passwords, FTP access, Admin, cPanel etc.
- Upload a fresh copy of the vBulletin files over the current files on the server.
- Make a new default style, enable users so they can switch styles and ask those who were getting alerts to test that style.

If they have nothing else to report then "Google" how to re-submit your site to Google for them to scan it again and confirm it's safe. Also if your on a shared hosting account inform your host of the infection, they may be able to help and run their own scans plus id on shared hosting make sure others on the same server were not affected .

[setishock]

The same thing happened at a computer forum I hang at. Turned out to be some of the ads were contaminated. Members clicked on an ad and their anti virus went nuts. When the owner switched ad companies it quit. That's one possibility. And even though it's Google I saw most of, they can get a bad ad from a vendor and not know it. It's not a virus, it's a trojan.
Ask your members that got hit for exact details of what they were doing when they got alerted. What they were looking at. What they clicked. What happened next.
Get up with your host. Let them know what is going on and that you're checking your side and would they check on theirs. Sometimes hosts can get contaminated.
And last thing go through and turn off HTML posting for all members in all parts of the forum. That will be in user group permissions.
Since from what you describe it appears to be common to all areas, my money's on the ads.

Edit:I have got to learn to type faster Superman. You beat me to it.