Need Help...Gumblar Virus on Forum

S

senna

New Member
Hey guys...I need some help please...I have this so called Gumblar.cn Virus on my Forum...A couple of people that wanted to register have run into it on registration..

Here is a Picture of it...

2dbv3fs.jpg


Forum responding very slowly at the moment and i have turned it off for the time being..

Anybody know how i can remove this from my Forum...Please help guys

Also im running newest vbulletin if that helps..

Thanks Guys
 
Most likely this exploit is caused by compromised FTP credentials. So start with your own computer. Scan it for spyware. Some people reported good results with Malwarebytes.

Then (from a clean computer) change FTP passwords.

Try not to store them inside programs that you use to upload files to a server.

Whenever possible use secure connections. I.e. use SFTP instead of plain FTP. Many shared hosting plans include SFTP.

Finally, remove the malicious code from all server files (.html, .php, .js, etc.). The easiest way to do it, is replace them with clean files from a backup.
 
If your PC is clean and you replaced your vBulletin files what are you seeing now that makes you think its still broken? You DO realize that your MOD files need to be replaced as well right? (any mods you have uploaded files for )
 
monoxera said:
Don't know why but this post made me LOL so hard!

You sound like some pest-control squad team leader PUAHAHAHAH :P <33
Click to expand...

WHEN your site goes down because its got the same infection, lets see how funny you think THAT is PUAHAHAHAH :P ... LOL
 
You must log in or register to reply here.
Back
Top