# Son launching Trojans? Apps?

**URL:** <https://forums.speedlife.net/t/son-launching-trojans-apps/122669>\
**Category:** SON240sx Off Topic\
**Created:** [March 17, 2009, 5:46pm UTC](https://forums.speedlife.net/t/son-launching-trojans-apps/122669 "2009-03-17T17:46:06Z")\
**Posts on this page:** 1\
**Showing post:** 68

<div class="post-metadata">

**Author:** ![roast](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/roast/32/5498_2.png) [@roast](https://forums.speedlife.net/u/roast)\
**Post date:** [March 21, 2009, 12:52pm UTC](https://forums.speedlife.net/t/son-launching-trojans-apps/122669/68 "2009-03-21T12:52:01Z")

</div>

> [@Happy Birthday Stairs!!!!](https://forums.speedlife.net/t/happy-birthday-stairs/20897/58):
>
> I realize I did not take enough precautionary actions that I should have which resulted in this mess.
> 
> A few things to note.
> 
> - Our forum is running on 3.7.1
> 
> - vBulletin recentlly released a new build (3.8.1) that fixes an exploit that is likely the cause of this all happening in the first place. More on this [here](http://www.vbulletin.com/forum/showthread.php?t=301882)
> 
> - What the above hijack to our scripts did is it injected Javascript code which caused any click in the browser to open a new window that takes you to a URL that launched the attack.
> 
> The attack is caused by a recent PDF exploit, as seen [here](http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9128278).
> 
> In a few moments i will be patching SON to latest build. Hopefully this keeps us clean (even though we’ve been safe for a few days now since I manually removed the problem)

I got this in the afternoon

[http://iijyjcthr.com/cgi-bin/index.cgi?mentat](http://iijyjcthr.com/cgi-bin/index.cgi?mentat)

---

_[View the full topic](https://forums.speedlife.net/t/son-launching-trojans-apps/122669)._