HELP ME ! PLEASE HELP !!!!

[saibaworld]

PLEASE HELP ME !!

My forum over at:

http://allnigeria.info

is behaving real funny.

After editing the template (i.e i added some hacks i got from http://www.simplemachines.org/community/index.php?topic=153647.0 which encourages a guest to register) and uploading it, the site gave me a "A virus has been detected on this website" warning on my antivirus.

When i removed the code i had put in, i now get:

"Template Parse Error!

It seems something has gone sour on the forum with the template system. This problem should only be temporary, so please come back later and try again. If you continue to see this message, please contact the administrator.

You can also try refreshing this page."

The hack i added is the emboldened part below:

" // Search within current topic?
   if (!empty($context['current_topic']))
      echo '
                  <input type="hidden" name="topic" value="', $context['current_topic'], '" />';

      // If we're on a certain board, limit it to this board .
   elseif (!empty($context['current_board']))
      echo '
                  <input type="hidden" name="brd[', $context['current_board'], ']" value="', $context['current_board'], '" />';

   echo '
               </form>
            </td>
         </tr>
      </table>';
     
// This message is shown to guests. This message will disappear upon registration.
   if ($context['user']['is_guest'])
      echo '
         <table width="100%" cellpadding="5" cellspacing="0" style="table-layout: fixed;">
            <td width="65px" align="center" valign="middle" class="windowbg3">
               <a href="http://forum.midessa.net/index.php?action=register"><img src="http://xxx.xxx.xxx/Themes/default/images/XXX.png" alt="Register to remove banner" title="Register an account to close this banner" />
               </a>
            </td>
            <td valign="middle" class="windowbg3">
                  <font size="3" color="#D0D0D0"><b>You are browsing this forum as a guest. Please <a href="http://forum.midessa.net/index.php?action=register">register</a> for an account or <a href="http://forum.midessa.net/index.php?action=login">login</a> to remove this message.</b></font>
            </td>
         </table>';
         
// This message is shown to users with a low post count < 5. This message will disappear after 5 posts.
global $user_info;
   if (($context['user']['is_logged']) && ($user_info['posts'] < 5 ))
      echo '
         <table width="100%" cellpadding="5" cellspacing="0" style="table-layout: fixed;">
            <td width="65px" align="center" valign="middle" class="windowbg3">
               <a href="http://forum.midessa.net/introductions-b11.0/"><img src="http://xxxx.xxxx.xxx/Themes/default/images/XXX.gif" alt="Your post count is too low." title="Please contribute 5 messages to our community" />
               </a>
            </td>
            <td valign="middle" class="windowbg3">
                  <font size="3" color="#E0E0FF"><b>Please contribute 5 thoughtful posts in order to remove this message.</b></font>
            </td>
         </table>';"

Though i have deleted this code from my index.template.php, yet my antivirus still returns a "A virus has been detected" message with the type of virus/malware identified as HTML:Iframe-inf each time i try to visit my site at http://allnigeria.info.

Please someone help me. I dont know where to go from here. PLEASE!!    

[TheDisturbedOne]

Can you post the entire file here using the

Code Select Expand

tags?

[Antechinus]

Even better, download it and post it as an attachment.
By the way, if your forum is at http://allnigeria.info/ why did you insert code that links to http://forum.midessa.net/ ?
That link gives me a page load error in Firefox.

[[SiNaN]]

This is not related to the codes you added to your index.template.php. It is a virus poking around these days. When your computer is infected, it adds such an iframe code to your .php, .html and such files. AFAIK, only solution is to first clear your computer from this virus, then remove all those iframe codes from all your files in your FTP.

[Joe N]

I clicked on your forum just and it completely froze my pc.

[TheDisturbedOne]

It works fine for me.

[Joe N]

It works fine for me.

It froze mine

[TheDisturbedOne]

Are you using IE?
It works on Safari on an iPod, but it never finishes loading on FF2 for Mac

[Joe N]

Are you using IE?
It works on Safari on an iPod, but it never finishes loading on FF2 for Mac

Google Chrome. What I don't understand is why it froze the pc. It said the site wasn't safe and
when I went to it, about 5 seconds later, it redirected to another site.

Joe

[saibaworld]

I had problems reconnecting to the internet.

ANTECHINUS
The code i pasted here is exactly as i pasted it into my template, tho I had to edit the http:// addresses. I deleted the code when i first had the antivirus warning and when it didnt solve the problem, i just copied the raw code i had saved (from the board at http://www.simplemachines.org/community/index.php?topic=153647.0) and pasted it here.
I must also confess here that I didnt know how to get the xxx.png and xxx.gif in the <img src="http://..."> parts of the code, so i jus left it like that. I hope that was not what caused all this!!! I still dont know a lotta things like how to make a favicon, how or where to get the ...xxx.png and ...xxx.gif which i already mentioned.

THEDISTURBEDONE, ANTECHINUS
Below are the attachments of the templates i first uploaded (with index.templateSMF.txt extension), the error template i saw in my themes/default/ directory listing (with errors.template.php extension) and the template i had to upload afterwards (with index.template.php extension).

Am so sorry to anyone my forum caused an heartache. Real sorry

But if wat BLUE DREAM says is true, wat do i then do???

Am so disturbed cos Google & others wil soon mark my site a dangerous site

Thanks

[saibaworld]

Hi, Hello

Is anyone out there?

I need help guys !!!!!!!

[Joe N]

Hi, Hello

Is anyone out there?

I need help guys !!!!!!!

Let us have time

[saibaworld]

Okay

[chim4lyf]

i dont have a clue wat is going on? i tryed to go on this site like i normally do but this smf thing comes up n i tryed to log in like i normally do but it wont let me i might be acting thick but cant sum1 tell me wats goin on
will we eva get the normal site back because am so confused ? help me lol

[babjusi]

If I were you I would replace all the forum files with a fresh set from the large upgrade 1.1.8 package, except the upgrade.php and the 2 upgrade.sq files and restore my recent db copy from before the hack.

Next step, I would disable all the attachments and avatars and look through all my space for any files that shouldn''t be there and check all the other files and make sure that nothing has been injected into them.

[saibaworld]

If I were you I would replace all the forum files with a fresh set from the large upgrade 1.1.8 package, except the upgrade.php and the 2 upgrade.sq files and restore my recent db copy from before the hack.

Next step, I would disable all the attachments and avatars and look through all my space for any files that shouldn''t be there and check all the other files and make sure that nothing has been injected into them.

I didnt understand one word of all d stuff u jus said.

pls jus break it down

[N3RVE]

Chim4lyf, you reported Babjusi's response? Any reason to justify that? Personally, I don't have an issue with it, the report has been closed.

DrTonik, Babjusi said you should download a copy of the Large Upgrade Package from the download section linked above, replace the server stored files with fresh sets so you're returned to the state of a default install. The most important files to replace should be the Templates under ./Themes and Sources under ./Sources, the Online Manual has some more information, see: Upgrade SMF

-[n3rve]

[dzinerfusion]

boy you almost infected my computer if i didnt have avast!!!1 I say clear all your files on your ftp and get avast antivirus to scan for the virus on your computer!

[[SiNaN]]

I wouldn't call this a hack actually; however, it is a good idea to replace all your files with the Large Upgrade package. Just do not forget that you need to clear your computer from this virus first. Your forum will get infected again otherwise.

[saibaworld]

n3rve, babjusi

I've tried to understand all u'v said here but am still a little bit fuzzy on how to go about it i.e which part of the Large Upgrade Package download goes where n how; n also which part of my directory listings to delete to remove the virus, etc etc.

Feel so dumb at not being able to understand it all. It was my web host i.e www.GoDaddy.com that installed my SMF forum in the first instance.

Should i jus simply request a delete and then a re-installation of my forum from GoDaddy? I ask cos am really lost on all the mumbo-jumbo.