Hello, I need help with a Icephoenix board. I had lots of "malware" things going on on the forum recently, so I checked what I could do, to eliminate the worm in the Admin index. I've been into CrackerTracker and I think when I pressed Security Recovery, now the Admin index doesn't work, and the Forum looks like it lost all main graphic things.
Check it out -

Link Removed - WARNING: The website has an active virus.

Please help

i m not expert . but to me seems that are missing some files on your server

did u checked if all files of icyphoenix are there ?

____________
We are the phpBBorg. Lower your Crackers. Your phpological and forumological distinctivness will be added to our own. Resistance if futile!

Limun wrote: [View Post]

i m not expert . but to me seems that are missing some files on your server

did u checked if all files of icyphoenix are there ?

Well I think they must be, I didn't delete anything, I just emptied the logs for bad logins and so on. It won't connect me to ACP.

And as you said, I am not an expert either.

well nothing cost you to check..  
specialy .css in template what u use and i think u use icyphoenix so style_ice.css

____________
We are the phpBBorg. Lower your Crackers. Your phpological and forumological distinctivness will be added to our own. Resistance if futile!

Limun wrote: [View Post]

well nothing cost you to check..  
specialy .css in template what u use and i think u use icyphoenix so style_ice.css

Brate ništa se ja ne razumem u takve stvari, znam da postavim forum ali ove .css i mysql stvari nemam pojma.

I don't know anything about .css and mysql things.  

MySQL returned an empty result set (i.e. zero rows). (Query took 0.0003 sec)

Omg Some databases are empty, but I still see posts,topic and such on the forum. LOGIN_IP is empty, as the IP_Acronyms whatever that is.

man dont panic...
your database its ok i think


look this
http://limunicy.freehostia.com/

is it similar view  like your ? i just deleted my style_ice.css from templates/mg_themes  and got same result like your

____________
We are the phpBBorg. Lower your Crackers. Your phpological and forumological distinctivness will be added to our own. Resistance if futile!

Limun wrote: [View Post]

man dont panic...
your database its ok i think


look this
http://limunicy.freehostia.com/

is it similar view  like your ? i just deleted my style_ice.css from templates/mg_themes  and got same result like your

Yes its the same, but thats design, still I can't access ACP and nothing else. I can just watch the forum and the first page. Can you tell me how to repair this? Hvala ti brate.

well first try upload "style_ice.css"  from your before made beckup to templates/mg_themas (i supose that this style is icyphoenix what you use)

you have beckup ?

also before this beckup this one "style_ice.css" what is in your server and put it in some safe place

____________
We are the phpBBorg. Lower your Crackers. Your phpological and forumological distinctivness will be added to our own. Resistance if futile!

maybe is not this problem and i m wrong...but try it

____________
We are the phpBBorg. Lower your Crackers. Your phpological and forumological distinctivness will be added to our own. Resistance if futile!

You have an active Virus embedded in your home page and your link has been removed.

Please see your first post.

Quote:

JS/Psyme is detection for malicious code embedded in web pages (often on compromised websites). This code attempts to exploit unpatched security vulnerabilities in order to install malware onto the system. Visited web pages are cached in the Temporary Internet folders and antivirus software scanning these folders will

[more] h**p://antivirus.about.com/od/virusdescriptions/a/jspsyme.htm

slavija333, did you add some extra code (like visit counters) or any HTML block?

____________
~~~ Andrea ~~~
User #379756 on Linux Counter
"If you can't apt-get something, it isn't useful or doesn't exist!!"

Lopalong wrote: [View Post]

You have an active Virus embedded in your home page and your link has been removed.

Please see your first post.

Quote:

JS/Psyme is detection for malicious code embedded in web pages (often on compromised websites). This code attempts to exploit unpatched security vulnerabilities in order to install malware onto the system. Visited web pages are cached in the Temporary Internet folders and antivirus software scanning these folders will

[more] http://antivirus.about.com/od/virusdescriptions/a/jspsyme.htm

I know sorry, this is what I wanted to remove, but instead I suppose I removed the thing I shouldn't.