check this forum because it seems to be hacked

[werner]

salamaleykum  

its user werner  

 

Check your board because its hacked  

 

I get steady PNs within this board and to my register e-mail that I should virus check my computer. With a link to a malign URL  

 

But my computer dont have virus  

 

 

 

So you could check your forum, because I suppose its hacked  

 

This may be the yahuds , to spy out/corrupt your user's computers.  

 

You as admin can see in my letter box these PNs  

 

Nor PMs I can send to the forum admins ... Trying to send a PM to abdelmomam or alma, dont work, user wouldn't exist. So I post that here.  

 

 

Example for one of these false virus-alerts I got:  

 

Quote:

Von: AdminGirLX   An: werner   Verfasst am: Mo Jan 25, 2010 1:58 am   Titel: Important message from the forum administration!Nachricht zitieren   Dear, werner!     A virus alert was noticed on your computer.   We highly recommend you to check your computer and perform online virus check at our site immediately: http://antivirus.effectmeds.com/werner   ----------------------------------------------------   Sincerely, Forum Administration sabily.org.

 

werner

[abdelmonam]

Assalamo alaykom,  

 

Barakallaho fik brother for reporting, I receive a notification mail from one brother on the mailing list about these messages on 25th January and I banned this user "AdminGirLX" at the same day, I hope it is OK now, or you are receiving till now these messages?  

 

Salem

_________________
You see things; and you say "Why?" But I dream things that never were; and I say "Why not?"
--George Bernard Shaw--

[nhasian]

yep i just received an email today. please make sure phpBB has all the security updates. also please read:  

 

http://www.thesamet.com/blog/2006/12/21/fighting-spam-on-phpbb-forums/  

 

since phpBB is notoriously easy to hack and is a security risk to the rest of the server that it resides on, i switched my phpbb message forum to SMF:  

 

http://www.simplemachines.org/

[werner]

The problem continues:  

 

Code:

Von:  ModeratorTeam     An:  werner     Verfasst am:  Mi Feb 10, 2010 8:14 pm     Titel:  Important message from the forum administration!Nachricht zitieren        Dear, werner!       A virus alert was noticed on your computer.   We highly recommend you to check your computer and perform online virus check at our site immediately: http://security-tool2010.com/werner   If you do not pass this test  we will have to delete your account and forward a complaint to your Internet provider.   ----------------------------------------------------   Forum Administration sabily.org.

 

 

I recommend you:  

 

1) In the forum admin part, adjust that OUTGOING e-mails pass via the mailserver of your provider, what's normally smtp.<provider> . Then the spam/virus filter of your provider can junk them  

2) Update to phpBB3 . If you do this, at the last step of the installation routine of phpBB3 you have to select that wou want to UPDATE your old forum, and you have to input the old-forum path, then all posts of the old forum will be transfered to the new forum.  

 

uasalam

[abdelmonam]

werner wrote:

The problem continues:     Code: Von:  ModeratorTeam     An:  werner     Verfasst am:  Mi Feb 10, 2010 8:14 pm     Titel:  Important message from the forum administration!Nachricht zitieren        Dear, werner!       A virus alert was noticed on your computer.   We highly recommend you to check your computer and perform online virus check at our site immediately: http://security-tool2010.com/werner   If you do not pass this test  we will have to delete your account and forward a complaint to your Internet provider.   ----------------------------------------------------   Forum Administration sabily.org.     I recommend you:     1) In the forum admin part, adjust that OUTGOING e-mails pass via the mailserver of your provider, what's normally smtp.<provider> . Then the spam/virus filter of your provider can junk them   2) Update to phpBB3 . If you do this, at the last step of the installation routine of phpBB3 you have to select that wou want to UPDATE your old forum, and you have to input the old-forum path, then all posts of the old forum will be transfered to the new forum.     uasalam

 

 

Assalamo alaykom,  

 

The user "ModeratorTeam" is now baned.  

I will see what to do to stop that, the problem is that we can not know when a user make an account that he will spam the forum, each time we receive a such alert we ban the user in question.. but we should find a real solution for that in-sha-Allah.  

 

Barakallaho fik brother

_________________
You see things; and you say "Why?" But I dream things that never were; and I say "Why not?"
--George Bernard Shaw--

[werner]

hello  

you should listen what i tell you  

 

It's senseless to delete just the users. It will open steady-steady new users.  

 

Do the two things I recomended you in my last post  

 

ua salam  

werner

[abdelmonam]

werner wrote:

hello   you should listen what i tell you     It's senseless to delete just the users. It will open steady-steady new users.     Do the two things I recomended you in my last post     ua salam   werner

 

 

Only jMehdi can do that, I alert him, thanks for the idea

_________________
You see things; and you say "Why?" But I dream things that never were; and I say "Why not?"
--George Bernard Shaw--

[jmehdi]

I've changed the smtp configuration, hope it will work

_________________
Are you a Muslim? Do you want a free and reliable operating system? Do you want Islamic software pre-installed? All of that and much more with Sabily!

[A^2]

Not really, I received the message today from this user: 'VaughnWhite'  

 

With a funny signature: "The Administrator of Sabily.org"  

 

 

It's a problem with the registration routine: it must be more complicated for spam bots to auto register themselves, and with the send-PM tool it must restrict a certain maximum during a certain time period for example ...

_________________
-- A^2

[sfajmal2004]

Today I received a similar message from "VaughnWhite". Please ban this user.  

 

Code:

Spam sending from your computer was detected.   We highly recommend you to check your computer and perform online virus check at our site immediately: http://virus-remove.webcindario.com/online-scanner/   If you do not pass this test  we will have to delete your account and forward a complaint to your ISP with attached log file (your IP address, etc.).     ----------------------------------------------------   Forum Administration sabily.org