Malware Attack?

[The-Wishmaster]

Hello again,

One of my members have rapported a problem.

When she go to the forum and look at a topic she get a pop up image with a link.

The images change but the link is the same..! I attached 1 of the images her (ScreenShot).

Is there a way for me to find out if 1# the site caught malware ? 2# her PC got infected ?

Thanking you in advance
Brian

[emanuele]

Can you post a link to your forum?

[The-Wishmaster]

I can send you a pm with the link the site if okay ?

The forum have adult content so no good idea to post it here i think

[emanuele]

Okay.

[The-Wishmaster]

Pm send thanks

[emanuele]

Usually these things are added through javascript scripts, looking at the pages and at the files I can't see anything wrong on the site.
Of course I can see the forum only as guest, but it shouldn't be *that* different (since attackers usually put the scripts at the end of an "index.php" file or at the end of a .js file and I checked all the .js files).

I would suggest as quick (and non-conclusive) test your member to try with another browser and if possible with another computer.

[The-Wishmaster]

Thanks i do that, I did send you a user/pasword you can use if you need to login as a member 

I also did a Virus Scan from my CPanel and that came out okay 

Thanks again
Brian

[emanuele]

lol
I didn't see the user/pass...

* emanuele is dumb sometimes...well...maybe not only "sometimes"...

[Storman™]

Not running Adsense are you by any chance ? There was an exploit earlier this week coming through some compromised Adsense ads. It's apparently sorted now but I'm seen several forums reporting popups and redirects in the past few weeks.

Might not be that but have you checked peoples sigs and avatars on affected pages or is it just random?

[The-Wishmaster]

No i don't use Adsense 

But the problem was the member had a BHO-hijacker on her browser, so the problem was not on the forum thanks God 

[DMR123]

It may not necessarily be from your forum..

What other web pages did your user have open?  As you will know, you dont have to have one window open to prevent another from performing other actions

[Kindred]

ummm... DMR< the OP already stated that it was a user problem, not a forum problem.

[DMR123]

ummm... DMR< the OP already stated that it was a user problem, not a forum problem.

When she go to the forum and look at a topic she get a pop up image with a link.

Therefore, that would make me think its a forum problem.

[Kindred]

But the problem was the member had a BHO-hijacker on her browser, so the problem was not on the forum thanks God 

[DMR123]

Okay.. I missed that bit.