Site had iframe attacks in it

New Member Joined: Mar 05, 2009 Posts: 13

Ive changed password and found most of the iframe attacks in my index.php files.

One thing I cant seem to figure out is since the attack my forums admin screen goes blank. You can see it loading one of the hackers links in the bottem of IE but the page stays blank.

If anyone is willing to try to help me get the forum admin page working again please toss me some ideas. My AIM is luckaveli for those with it willing to help.

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

If you don't have a current set of your site files on your PC, ftp to your site and d/l all your files. Then do a search on all those files for the link or some unique part of the link. If/When you find any files with the link, correct them.

You also need to examine your database tables. Use phpMyAdmin and examine your nuke_config table to start with. Make sure that there are no links in the footers or elsewhere. Check your nuke_authors table and delete any admins that should not be there.

If all of the above does not clear up the issues then post back for more help.

Posted: Sun Jul 26, 2009 9:30 am

Ok so I downloaded the site scanned it with 2 antivirus/malware programs. Also did a search a few times and nothing came up.

Myphpadmin my authors are good just has my god admin in there. when you say examine nuke_config you mean select it and hit browse? and same for each table under it? if so I didnt find anything out of normal.

Posted: Sun Jul 26, 2009 9:37 am

config table: Select Browse and see if there are any links replaced in the foot1-foot3 columns. If so, remove them.

Posted: Sun Jul 26, 2009 9:42 am

nothing there.

Posted: Sun Jul 26, 2009 9:50 am

Try changing your theme to a theme that has no forum templates. It's looking like you have missed a file somewhere.

Posted: Sun Jul 26, 2009 9:58 am

ok I give it a shot

Posted: Sun Jul 26, 2009 10:05 am

hmm when I try to change the theme in preferences and I hit save it just stays the same theme.

Posted: Sun Jul 26, 2009 10:08 am

Ok I got it to change themes but still the same issue

Posted: Sun Jul 26, 2009 10:15 am

Dont know if this helps but I get the virus/malware blocker popup when I reply to forum messages.