UBB.threads PHP Forum Software Community Forums UBB.threads 6 Version 6 Support Hit twice now by malicous script ...

I am looking for some kind soul to help me

1. Remove the malicious script that has managed to get onto our Message Boards

2. Make the boards secure against this type of 'attack'

I can pay for this - but not a huge amount please.

Where? When? What?

Currently infected with

- loaderadv.527.jar
- ms06-001wmfexploit

helllpppppppp!!!

Are you sure this is on your message board and not on your computer?
Are you allowing HTML on your message board? Where can we see your message board?(link) And how does the infection represent?

No it is def. residing in the /ubbthreads directory on the server.

My machine catches it as soon as you visit the site.

I am not sure about posting the link as I do not want to be responsible for infecting other pcs.

Are there any gurus out there who can clean this up?

Sounds like http://www.spywareguide.com/spydet_2789_downloader_adv.html

Oh btw - turned off html a while ago - so at a loss to know how 'they' did it this time!!

$$ for someone who can cure this

You had a similar problem back in december... strange, are you allowing uploads? Who else has ftp access? Is your server up to date with current versions of php/mysql?

If Anno can't get to it, pm me access details and I can check it this evening (after 5pm CST).