Author Topic: Didn't upgrade but says I did?  (Read 10455 times)

0 Members and 1 Guest are viewing this topic.

Offline Shawn

  • Newbie
  • *
  • Posts: 40
    • View Profile
Didn't upgrade but says I did?
« on: October 24, 2011, 11:46:11 AM »
I haven't upgraded since the switch to ioncube but just realized all my installs say I'm running: Version 1.0.7 build 39 and when I check the updates it says there are no updates... so I'm confused because I KNOW I DIDN'T RUN THE LAST BUNCH OF UPGRADES!  How can I check and see what I'm really running and why's it say I'm up to date??

Offline ip0li

  • miSearkXD
  • Administrator
  • Hero Member
  • *****
  • Posts: 1952
    • View Profile
    • Premier Сasual Dating Real-life Girls
Re: Didn't upgrade but says I did?
« Reply #1 on: October 24, 2011, 12:50:24 PM »
1) You are running what it says in HEADER so by what you say u are running latest version.

2) It is impossible script upgraded by itself. We do not have such feature in our script.

Offline Shawn

  • Newbie
  • *
  • Posts: 40
    • View Profile
Re: Didn't upgrade but says I did?
« Reply #2 on: October 24, 2011, 02:14:34 PM »
Ok well my server is still getting the same exploits injected into a bunch of my websites as before all the updates and my host says: based on the logs, there appears to be something in a /tp/ directory that appears to be running a remote script.

I know I didn't upgrade because I was waiting to see how the newer versions worked and with the two step upgrade I didn't have time, my host didn't upgrade it so I'm at a loss as to why it would show the latest version.

Offline ip0li

  • miSearkXD
  • Administrator
  • Hero Member
  • *****
  • Posts: 1952
    • View Profile
    • Premier Сasual Dating Real-life Girls
Re: Didn't upgrade but says I did?
« Reply #3 on: October 24, 2011, 02:18:17 PM »
Please ask your host to try and locate exploit then you should update(after its cleaned) to latest build. This is ONLY way to deal with it and obviously exploit had to do something with VERSION NUMBER.

cheers

Offline Shawn

  • Newbie
  • *
  • Posts: 40
    • View Profile
Re: Didn't upgrade but says I did?
« Reply #4 on: October 24, 2011, 03:56:01 PM »
I've been asking my host since the first time we had problems but everytime they can't find anything except TP folder is suspicious and its zend encoded so they don't know what to look for.  So I'm guessing it's hidden in there somewhere...

Offline Shawn

  • Newbie
  • *
  • Posts: 40
    • View Profile
Re: Didn't upgrade but says I did?
« Reply #5 on: October 24, 2011, 07:10:31 PM »
Host says: /tp/top_thumb.php

this appears to be the backdoor

However, it is zend encoded, so, we can't troubleshoot it.

I've done the updates (until the ioncube update) ever since the first time you guys had an exploit so how the hell am I still dealing with this??

Offline Shawn

  • Newbie
  • *
  • Posts: 40
    • View Profile
Re: Didn't upgrade but says I did?
« Reply #6 on: October 24, 2011, 07:14:22 PM »
and i can't seem to downgrade or upgrade, says 0 files updated even though there are 3 downgrade options

Offline Kildoozer

  • Administrator
  • Sr. Member
  • *****
  • Posts: 420
    • View Profile
Re: Didn't upgrade but says I did?
« Reply #7 on: October 25, 2011, 01:03:37 AM »
2 Shawn: contact me for fast check/solution
kildoozer@scriptpulse.com