TFF malware ridden

[Odin1199]

Today my Avira antivirus prevented me from going to TFF because it considered it a malware infested site. Is it true or is my long unupdated antivirus playing tricks on me?

[Andromeda]

I already reported it to Fuzz and he's cleaned up the problem. He thinks some bot inserted something into the forums. Everything looked fine from what he said and he's already asking Google to remove the warning that you'll get even without Avira. He said it seemed harmless.

Everything should be resolved. Fuzz can comment more on the issue.

[Rowan]

tff3.jpg

tff1.jpg

tff2.jpg








This happened to the website of my workplace, we needed google to authorise the page again to show that it wasn't malicious. Why this is happening now though, I dont know.

[Odin1199]

I see, awesome!

[Cyric]

There have been some vB4 and 5 exploitations acknowledged by vB. If you all still have your /install/ directory talk to Fuzz about deleting it.

[Odin1199]

And get him to check TTF ranks so we know how many there are.

[Fuzz]

Yep! We have been hit again with our friend the google MALWARE warning!

It appeared to be a light-weight code injection on the forum footer. I already got rid of it and notified Google to remove the warning. I think there are a few patches we are missing for VB4, so I will get those installed today, as well... I am NOT going to VB5 though... that is just a mess!

What ranks are you referring to Odin? If it is the ones under our usernames, I believe it is 49.

[loaf]

There is a list somewhere. TFF God is the final one.

[Fuzz]

Just finished the upgrade to the latest vb release and did another request to get the malware warning off... hopefully it will be soon.

Oh, and here is the list of TFF ranks... straight out of the admin panel! Enjoy.

user-ranks.jpg

[Cyric]

Awesome job!

[Odin1199]

Awesome, thanks Fuzz! Seems I missed Aeon and Eidolon.

[Marceil]

Can't get to user cpu... this the page that dislplays.

Trying to get contenttype class id from invalid contenttype '24' on line 533 in /var/www/vhosts/thefinalfantasy.net/httpdocs/forums/vb/types.php
#0 /var/www/vhosts/thefinalfantasy.net/httpdocs/forums/vb/item/contenttype.php(111): vB_Types->getContentTypeClass('24')
#1 /var/www/vhosts/thefinalfantasy.net/httpdocs/forums/vb/item/contenttype.php(100): vB_Item_ContentType->loadTypeInfo()
#2 /var/www/vhosts/thefinalfantasy.net/httpdocs/forums/vb/model.php(302): vB_Item_ContentType->loadInfo()
#3 /var/www/vhosts/thefinalfantasy.net/httpdocs/forums/vb/model.php(438): vB_Model->Load()
#4 /var/www/vhosts/thefinalfantasy.net/httpdocs/forums/vb/collection.php(533): vB_Model->isValid()
#5 /var/www/vhosts/thefinalfantasy.net/httpdocs/forums/vb/collection/contenttype.php(274): vB_Collection->createItem(Array, 1)
#6 /var/www/vhosts/thefinalfantasy.net/httpdocs/forums/vb/collection.php(448): vB_Collection_ContentType->createItem(Array, 1)
#7 /var/www/vhosts/thefinalfantasy.net/httpdocs/forums/vb/model.php(348): vB_Collection->applyLoad(Resource id #80, 1)
#8 /var/www/vhosts/thefinalfantasy.net/httpdocs/forums/vb/model.php(302): vB_Model->loadInfo()
#9 /var/www/vhosts/thefinalfantasy.net/httpdocs/forums/vb/collection.php(408): vB_Model->Load(false)
#10 /var/www/vhosts/thefinalfantasy.net/httpdocs/forums/vb/collection.php(843): vB_Collection->Load()
#11 /var/www/vhosts/thefinalfantasy.net/httpdocs/forums/packages/vbattach/attach.php(291): vB_Collection->valid()
#12 /var/www/vhosts/thefinalfantasy.net/httpdocs/forums/includes/functions_user.php(128): vB_Attachment_Display_Multiple->__construct(Object(vB_Registry))
#13 /var/www/vhosts/thefinalfantasy.net/httpdocs/forums/usercp.php(1056): construct_usercp_nav('usercp')
#14 /var/www/vhosts/thefinalfantasy.net/httpdocs/forums/vbseo.php(1397): require('/var/www/vhosts...')
#15 {main}


Fatal error: Trying to get contenttype class id from invalid contenttype '24' on line 533 in ..../vb/types.php in ..../vb/vb.php on line 286

[Kurt Zisa]

Yeah I got the same problem. Also when I click on a link that leads to another page within the site, I get a bunch of code at the top of the page and nothing else. Has an upadate gone wrong or something?

[Fuzz]

Thanks Marceil and Kurt for alerting me about this... There was indeed an error in vBulletin that is now fixed!

I recently upgraded the forums to the latest released of VB - and apparently I forgot to clear the system cache! Anyways, it appears all is well now but let me know if you run into any other issues.

[loaf]

That Super Cache.