need help solving a problem

[stubbdog]

I installed and have have been running 1.4.9 for a year or so with no problems and have been very happy with it.

Then about a week ago, I noticed that when I went to my gallery I got two problems:

1. It wants to load an active X file to run outlook
2. My symantec anti-virus is popping up messages saying that it is blocking an intrusion attempt by ccfelomvhk.com (IP 85.255.121.195)


So, I just updated to 1.4.18 and even tho the gallery is working, both of those problems are still happening. 

I did a search here in the forums and didnt find anything related to that webname.  So, I am started up this thread to ask for help related.

I can only guess that the problem is located in one of the following places:

include/config.inc.php
anycontent.php
albums...

as obviously those are the only things that would not have been changed in the upgrade.

Any help would be appreciated.

[Hein Traag]

Quite possible you have been hacked.

Read these two threads:
http://forum.coppermine-gallery.net/index.php/topic,51671.0.html
and
http://forum.coppermine-gallery.net/index.php/topic,51927.0.html

[François Keller]

your serach was not efficient 
look here http://forum.coppermine-gallery.net/index.php/topic,51671.0.html
and here http://forum.coppermine-gallery.net/index.php/topic,51927.0.html

p.s. Dammned, hein was faster

[stubbdog]

thanks for the help.  Only on page 6 of like 16 but yep looks similar to that one.

Guess my search didnt find it cause the webname and IP address that it came from associated with mine was a little different than the ones in that post, but the similaririties are there for sure.