Exploit causing server to send out email spam

[John Lester]

Have you double checked XYZ's user group permissions?

Never mind there is no CMS section in user group permissions. Thought there was.

[John Lester]

Search your phrases for "powered by" and delete the words leaving a blank space, or anything of your own. You are allowed to do this, but only with the "powered by vBulletin" phrase...

[John Lester]

Is 4.2.3 ever coming out of beta?

[John Lester]

So if I'm not on 4.2.2 I'm s.o.l.? I mean it can't be that hard for support to look at the 5 files in the zip and see what's different from the vanilla files. I'm actually confused about how they were...

[John Lester]

K no reply.... latest news on this issue:

1 Deleted all products except for blog and cms
2 Disabled blog and cms
3 Set blog and cms plugins in plugin manager to inactive (unchecked)...

[John Lester]

Yes Friday night before going to sleep I had manually disabled the blog and cms as well as the other products and plug-ins. Saturday when I enabled hooks in config.php and uploaded it to the server the...

[John Lester]

I don't quite understand the whole email header thing. I can't make sense of what it actually means other then two different ips are using my server to spam So if anyone can dumb that email down for...

[John Lester]

Friday night before going to bed I checked my email like I always do. Was shocked to find over 400 mail delivery failure messages. Read one of the emails and knew right away the server was compromised....

[John Lester]

Well I might as well bump this one last time. There's got to be someone who has multiple forums set up under sub domains with a forum on the main domain.

[John Lester]

Bump?

[John Lester]

I have my main forums on my domain. I'm trying to install 4.2.2 on a sub domain to show the mods and other admins what to expect when we upgrade. However I'm having trouble with either to cookie setting,...

[John Lester]

There was no attached file btw.

[John Lester]

I couldn't find any stylevars to control that text. So I found out how to control it using the additional.css template... had to actually add the color property to each one ( color: #CC00CC !important;...

[John Lester]

It's a HTML issue in your postbit (or postbit legacy depending on which one you use).

Search in that template for <dl class="userinfo_extra">

Under it you will...

[John Lester]

As a guest using Firebug to look at that page, I see an invisible div (meaning that nothing is displayed from that div) that is causing the blank space.

<div id="footer"

...