2008-10-16, 07:50 PM
tvshowman Wrote:sub you need to look into this as this is much more than a coincidence...I've had a good look, but see any sign of anything on the web server. If the reports keep coming in, then I'll investigate further.
NextPVR Forums
Information
Community Announcements
Possible infection found on GBPVR site?
Possible infection found on GBPVR site?
|
2008-10-16, 07:56 PM
I got the same thing about a %.pdf not found as well using FF 3 & now when I look in taskmanager AcroRd32.exe is running.
2008-10-16, 07:58 PM
Jaggy Wrote:I got the same thing about a %.pdf not found as well using FF 3 & now when I look in taskmanager AcroRd32.exe is running.Out of curiosity, was that before or after the web server was restarted?
2008-10-16, 07:59 PM
Jaggy Wrote:I got the same thing about a %.pdf not found as well using FF 3 & now when I look in taskmanager AcroRd32.exe is running. I tried to install trojan hunter and it gives a dll error on install so something is messing with trojanhunters installer. the program installs but I don't trust it since it failed to install a dll it needs... can't find a link to remove the trojan without norton installed
[SIGPIC][/SIGPIC]
2008-10-16, 08:02 PM
sub Wrote:Out of curiosity, was that before or after the web server was restarted? Before the server restart.....but now I'm following this thread with great interest as this is the wifes laptop & I can see trouble coming my way tonight if I don't get it sorted by then!
2008-10-16, 08:04 PM
I get the same thing. The page is redirected to
hxxp://maxtest.sudatraff.info/ts/getfile.php?f=vispdf then adobe reader complains. A google search shows this to be a Trojan infection. I believe GBPVR or its host has been compromised.
2008-10-16, 08:06 PM
JoeTheZombie Wrote:I get the same thing. The page is redirected toSame question for you - when was this before or after the web server was taken down?
2008-10-16, 08:06 PM
sub I found this post from another website posted yesterday. I put the hxxp to prevent a live link
. not sure if it may help you pinpoint any areas. Code: Our website was hacked and many of the html files had the following coded appended to the <body> tag:disregard this post... not sure why it came up in google for bloodhound but I see no mention of it in that thread
[SIGPIC][/SIGPIC]
2008-10-16, 10:36 PM
The culprit had managed to get in through an out dated version of the joomla content management system. I was unable to isolate and remove the problem, so for now the entire front page and Joomla has been entirely removed.
I've also taken the opportunity to make sure everything else is up to the latest patch levels. I'm pretty sure this is the end of it, but if anyone notices any furture strange goings on, please let me know. I suspect we'll be without a front web page for a while...
2008-10-16, 11:31 PM
Might this be a good time to shake the can and ask for contributions? My yearly donation is coming up so I just sent you an early $25 (better spend it fast before the new president takes it from me!)
If I can be so bold as to spout off more------- Calling all GBPVR users---when is the last time you got so much for so little? Take a hard look at the forums and you can barely find a day when sub's posted less than 20 or so times. Even companies that charge $30 a year for support doesn't even come close to the support sub gives for a free program. I know times are hard but please realize all you get from this program and consider donating something. Don't wait, please do it now. (this message is paid and approved by me only.....I don't speak for sub am just a user who truly enjoys the use of this program. Paul Paul Custom ASUS Maximus X Hero, 16 GB Memory-ASUS GeForce 1050 Ti, H115i Pro AIO, 850W PS, CM H500P case, Corsair Vengeance RGB Ram, Samsung 970 EVO, HDHomerun Prime & Extend Tuners- running Windows 10 (and other goodies) |
|
|
