tp-images folder and hacker attempt

[darkangel]

Hi there, I was going thru the directories to download them as a backup on my computer when I noticed that several files were sent to infection bin by virus proggie...yay

I went to look and it would seem that the fourms---several of them on this one server, have yet to check the other servers still. There were loads and loads of php and htm and html files located in the tp-images/file folder.

I have deleted them but the latest edit by the culprit was February and November this year.

I have gotten hold of the IP addie for one of the links listed for redirection (which btw is not being done since site works very well and normal) and banned it and deleted the files from the folder. I also added a .htaccess file to that directory in hopes that it will not allow it again for there were like 6 of them in there and not one was mine.

Is there a TP mod to stop hackers...code to add...something??

This is the complete list of what is mostly installed on the main forums:

1.    Enhanced Dropdown      1.1      
2.    GlowColorsDropDown    1.1    
3.    DisableTemplateEval    1.2    
4.    Signature BBCode Bar    1.4    
5.    Disable_Decrease_Post_Count_Option    1.0    
6.    Simple_Mood    1.0    
7.    Join Reason    1.2.1     
8.    PaypalDonations    2.0    
9.    Add Honey Pot to Track IP    1.1     
10.    YouTube BBCode    2.3     
11.    SMF Gallery Lite    2.0.5     
12.    Wiccan Rede    1.0     
13.    Profile Music    1.0     
14.    Stop Forum Spam    0.3     
15.    Admin Notepad    2.0.1     
16.    Contact Page    2.1.1     
17.    Allow TAB in Postbox    1.1     
18.    PM Sent Notification    1.0.5     
19.    Child Dropdown for Board Index    1.1     
20.    TinyPortal    1.083     
21.    Wrap Text Around Image    1.0     
22.    SMF 1.0.20 / 1.1.12 Update    1.0     
23.    FontandSizeDropdown_1.2    1.2

[IchBin]

No mod for that type of stuff here. There are posts, guides, and mods at SMF to help though. One thing you should do is to make sure that you no longer have the FCKeditor folder from the older versions of TP on your server. That software had some exploits that have been handy for the hackers out there.

[darkangel]

ok, I did have the fckeditor folder and a wysiwyg folder but noticed that when I accidently deleted it from the attic directory the forum was unaffected...so removed them both.

now the only one is in the actual tp directory whizzygig or something like that...lol

ty