Go4Expert Founder
2Jun2009,09:59   #11
shabbir's Avatar
I am able to browse the site completely fine.
Security Expert
2Jun2009,20:48   #12
indiansword's Avatar
i dont know, m using avast AV and so do most of my members, i have attached a screenshot here that contains the warning that pops up everytime someone surfs through my website. I have noticed that very few of the web pages dont give the warning but most of them do.
Attached Images
File Type: jpg tmerror.jpg (25.3 KB, 6 views)
Ambitious contributor
3Jun2009,02:18   #13
P455w0rd_Cr4kz's Avatar
interesting indeed,i never sen that before. Double check all your /root .php files codes.
Also,i wonder if there's any new exploit using signatures ect.
I did went to your site using IE couple of times and only happened once. I got a pop up running a fake antivirus scanner trying to make me download a .exe file.
Now..also it might be a "BHO" somewhere. I wish i could of been more helpful.
Security Expert
3Jun2009,05:42   #14
indiansword's Avatar
so far what i have done is i have downloaded the ENTIRE web files from my ftp to the computer and scanned them with different AVs, but no such luck.
Go4Expert Founder
3Jun2009,08:50   #15
shabbir's Avatar
I do not get anything of that sort and I am using Norton
Ambitious contributor
3Jun2009,08:52   #16
P455w0rd_Cr4kz's Avatar
Quote:
Originally Posted by indiansword View Post
so far what i have done is i have downloaded the ENTIRE web files from my ftp to the computer and scanned them with different AVs, but no such luck.
Sounds like a drive by infection pest. I looked around and found these:
http://securityresponse.symantec.com...606-99&tabid=2
Security Expert
3Jun2009,22:08   #17
indiansword's Avatar
Quote:
Originally Posted by P455w0rd_Cr4kz View Post
Sounds like a drive by infection pest. I looked around and found these:
http://securityresponse.symantec.com...606-99&tabid=2

So exactly do u suggest? Will it be fixed if i move my forum from myBB to vBulletin? and remove everything else thats sitting in FTP and doing nothing?
Security Expert
4Jun2009,23:35   #18
indiansword's Avatar
update: ISSUE FIXED

it was an XSS vulnerability because of that particuler theme. I enever thought about that because i thought myBB is quite secured, IT IS. But just the problem in theme designed which allowed html entities.

Just as an FYI,
Thanks for the support anyway.