Exploit causing server to send out email spam

[John Lester]

Have you double checked XYZ's user group permissions?

Never mind there is no CMS section in user group permissions. Thought there was.

[John Lester]

Search your phrases for "powered by" and delete the words leaving a blank space, or anything of your own. You are allowed to do this, but only with the "powered by vBulletin" phrase...

[John Lester]

Is 4.2.3 ever coming out of beta?

[John Lester]

So if I'm not on 4.2.2 I'm s.o.l.? I mean it can't be that hard for support to look at the 5 files in the zip and see what's different from the vanilla files. I'm actually confused about how they were...

[John Lester]

K no reply.... latest news on this issue:

1 Deleted all products except for blog and cms
2 Disabled blog and cms
3 Set blog and cms plugins in plugin manager to inactive (unchecked)...

[John Lester]

Yes Friday night before going to sleep I had manually disabled the blog and cms as well as the other products and plug-ins. Saturday when I enabled hooks in config.php and uploaded it to the server the...

[John Lester]

I don't quite understand the whole email header thing. I can't make sense of what it actually means other then two different ips are using my server to spam So if anyone can dumb that email down for...

[John Lester]

Friday night before going to bed I checked my email like I always do. Was shocked to find over 400 mail delivery failure messages. Read one of the emails and knew right away the server was compromised....

[John Lester]

Well I might as well bump this one last time. There's got to be someone who has multiple forums set up under sub domains with a forum on the main domain.

[John Lester]

Bump?

[John Lester]

I have my main forums on my domain. I'm trying to install 4.2.2 on a sub domain to show the mods and other admins what to expect when we upgrade. However I'm having trouble with either to cookie setting,...

[John Lester]

There was no attached file btw.

[John Lester]

I couldn't find any stylevars to control that text. So I found out how to control it using the additional.css template... had to actually add the color property to each one ( color: #CC00CC !important;...

[John Lester]

It's a HTML issue in your postbit (or postbit legacy depending on which one you use).

Search in that template for <dl class="userinfo_extra">

Under it you will...

[John Lester]

As a guest using Firebug to look at that page, I see an invisible div (meaning that nothing is displayed from that div) that is causing the blank space.

<div id="footer"

...

[John Lester]

Edit the registered users user group. Scroll down to member groups area and make sure "can have additional member groups" (or something similar I'm not at home and can't give exact phrase)...

[John Lester]

Edit your PRO user group, scroll down to member group options, make sure they can have a secondary group.

[John Lester]

Have you edited the permissions via the forum manager?

ACP -> Forums & Moderators -> Forum Permissions -> select forum then go through and edit each user group to allow or deny...

[John Lester]

Well the log showed no entries because they were all set not to be logged So I edited each one and selected the hourly and daily cleanups to be logged. We'll see how that goes....

[John Lester]

The log shows that no scheduled task has been run since September of 2011 I disabled all tasks, then re-enabled them one at a time (also forcing them to run as I enabled them), we'll see how that...