XOOPS 
Forum
Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk
  1. Board index / 
  2. XOOPS Modules Support forums / 
  3. Module troubleshooting 
  4.  / very serious NEWBB exploitation problem!
Register
1
mouacy
very serious NEWBB exploitation problem!

  • 2005/2/19 22:50

  • mouacy

  • Not too shy to talk

  • Posts: 138

  • Since: 2002/11/2


Whenever I post or reply to a post in the newb forum, on top and outside of the "thank you for your submission", I get this message:

-rw-r--r-- 1 mydomain mydomain 5031 Mar 29 2004 admin.php -rw-r--r-- 1 mydomain mydomain 632 Mar 29 2004 blocks.php -rw-r--r-- 1 mydomain mydomain 0 Mar 29 2004 index.html -rw-r--r-- 1 mydomain mydomain 4178 Mar 29 2004 main.php -rw-r--r-- 1 mydomain mydomain 7465 Apr 8 2004 modinfo.php

I believe someone hacks my site or some virus is there. Does anyone know how I can get rid of this?
2
Vionetwork
Re: very serious NEWBB exploitation problem!

  • 2005/2/19 22:53

  • Vionetwork

  • Just popping in

  • Posts: 14

  • Since: 2005/1/4 2


Hmm, This might not be a hacking attempt but an error/mistake on you or your server.

=| I don't know what that is, I am guessing it has something to do with Chomding your folders right? This interesting though, hopefully someone with more experience will fill us in.
3
mouacy
Re: very serious NEWBB exploitation problem!

  • 2005/2/20 21:08

  • mouacy

  • Not too shy to talk

  • Posts: 138

  • Since: 2002/11/2


I don't know exactly which file read my directory and display the file permission on screen...

I decided to DEACTIVATE the NEWBB module and delete the folder NEWBB (without uninstalling the database). I upload a copy from my own computer, and update the module in admin.

The exploitation is gone. My assumption is that the shlldoc virus must have written itself to a file somewhere inside the NEWBB folder. By getting rid of the module, I got rid of the virus.
4
Vionetwork
Re: very serious NEWBB exploitation problem!

  • 2005/2/22 22:50

  • Vionetwork

  • Just popping in

  • Posts: 14

  • Since: 2005/1/4 2


Damn, nicely done :) I'll remember this topic just incase something like this happens.

Login

Register now!  |  Lost Password?

Search

Advanced Search

Recent Posts

Who's Online

432 user(s) are online (88 user(s) are browsing Support Forums)

Members: 0

Guests: 432

more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Oct 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits