Quote:
Originally Posted by gollum65
John Mohov indeed appears to be the culprit in my case. The fany08 domain is apparently registered to him, and that's what's embedded into my files.
To MY knowledge, this started a few weeks ago when the Suicide Squeeze league was attacked using a simiar method, although you'd have to contact Lonnie Moody to find out for sure. He had to move his whole site to a new host.
My webhost is totalchoicehosting dot com and when I contacted them this morning, they advised me it was that my global permissions were set to allow files to be written, and they fixed the permissions for me. Time will tell if they were right. I've also changed all the website passwords as they directed.
Regarding my forum version, I was on SMF 1.16 till this morning. I updated to 1.17 today.
|
While they gave you sound advice, you should also make sure they are running the latest version of php.
In addition, via the process of elimination, it appears that there was some sql injection and such code included a self timer which made the forums self destruct and recreated the iframes, even after cleaning out infected indexes from the directories. I was doing so nonstop for hours at one point. Now that I've removed the forum database, it appears all is calm.