1 barberj May 16, 2010 00:10
3 barberj May 17, 2010 19:16
Had a go but failed miserably http://forums.b2evolution.net/viewtopic.php?t=20938
On closer inspection, when I try adding a post, their is a message saying Connecting to buyfootjoy.info
Looks like spam. But where to look to get rid of it?
4 yabba May 17, 2010 19:27
Whilst evo 3.x is full of spam, that bit's not one of them.
Care to share a link to your install?
¥
*edit
I'd also need a login that has write && file access.
Guessing you'd be better sending them via pm to either sam2kb, tilqi, or myself ... and I'm off for food soon ;)
¥
5 barberj May 18, 2010 09:01
Let me try a few things first. I have managed to install 3.3.3 properly and the Add/link post functionality is back. :)
Now I guess I need to read the thread on blocking spam! :D
6 yabba May 18, 2010 17:39
If it was me I'd be searching all files for "buyfootjoy.info " && || "base64" ;)
¥
7 barberj May 20, 2010 09:58
8 yabba May 20, 2010 17:59
I'd be pretty worried if that happened to my web.
Ask you host if they're running suphp, if they're not then I'd *strongly* suggest that you demand that it be installed or I'd move to another host.
¥
9 barberj May 20, 2010 18:39
But if a virus steals your FTP access, what's to stop it downloading/uploading new versions of your javascript/php files?
This is what the "AntiVirus Vista" trojan did/does.
I cleared it off with http://www.malwarebytes.org/mbam.php
but have started using ubuntu 10 since then anyway and changed my passwords. The modified date of the changed files are all the same so easy to spot.
10 yabba May 20, 2010 18:52
Absolutely nothing ;)
Glad to hear you solved it ... and moved away from windows :D
¥
Try 3.3.3
¥