Forum hacked?

[tanthalas]

Still getting major AV warnings even when automatically logged-on to the website. Looks like it's a trojan embedded in the site, and the AV program is catching it in the browser's cache (using Chrome FYI).

It's a trojan called Badsrc-M, if it matters.

[Steve]

Good information from both of you. According to SpamFighter.com, "Users of WordPress must be vigilant as one fresh malicious program is currently acting to self-insert inside WordPress software. Called Mal/Badsrc-C, the malicious program, a virus exists inside the index.html file and due to its manner of installation it’s visible solely within the Internet Explorer (IE) Web-browser of Microsoft."

[tanthalas]

If that's the case, the IE users on this board may want to do a virus scan on their computers - and possibly change any passcodes they may have entered on their computers in the last month or so.

[Eric]

hi all -

whatever hacked the site inserted an evil php script into every php file used in both wordpress and the forum. i *think* i have now cleaned everything out, but do let us know if you seen any more weirdness.

i've also updated the forum to the latest phpbb version. this is looooooong overdue. sorry about all the blue, but for now it'll have to do.

Eric

[Fred]

Thank you, Eric!

[Fred]

Thanks once again for yeoman service, Eric and Michele, for getting the gremlins out of viennateng.com.