Urgent: Weird Statistics Problem Options

[ibrahimdelil]

My servers have been running about 6 months on 2.8.2 now, without any major problems. Yet today, when I opened up the statistics page, I faced this:

http://j.imagehost.org/0736/wat.jpg

I am currently serving ads without problems, and by the looks of it statistics are being generated without a problem (can see active and inactive ones etc). The problem is -obviously- the impression, click and ctr columns are missing!

Nothing unplanned happened on the server, no wild traffic spikes, no database or maintenance problems, nothing. The columns just decided not to show up - lol.

I have tried generating Excel reports and stuff too, no data is shown there either.

So, what do I do?

[softyram1]

My servers have been running about 6 months on 2.8.2 now, without any major problems. Yet today, when I opened up the statistics page, I faced this:

http://j.imagehost.org/0736/wat.jpg

I am currently serving ads without problems, and by the looks of it statistics are being generated without a problem (can see active and inactive ones etc). The problem is -obviously- the impression, click and ctr columns are missing!

Nothing unplanned happened on the server, no wild traffic spikes, no database or maintenance problems, nothing. The columns just decided not to show up - lol.

I have tried generating Excel reports and stuff too, no data is shown there either.

So, what do I do?

Hi
OpenX
1.We offer specialized services in the following areas,
1. Installation of OpenX along with the state-of-the art plugins to cater the needs of the client.
2. Customization : We identify the best OpenX plug-ins that suits clients business needs of the client
3.Integration: We extensively work on integrating OpenX software along with your software or site. Further, we also integrate with other software; user of your site can create own advertisement and banners or Websites and zones.
4. Consultation: We offer the following consultancy services
1. General Support inclusive of online training
2. Trouble Shooting
3. Tuning and Optimization
4. Remote Administration
5. Disaster Recovery Service
5. In addition, we offer several customized mod based on our Client requirements.
6 We also offer our specialized services like targeting mod, especially in the area of behavioural targeting, contextual targeting and Ad Network Revenue Optimization Service.

Here is some of the openx adnetwork works

http://lindotiger.com/
http://www.ad4game.com/
http://www.criteo.com/
http://www.fluffyclouds.co.uk/
http://www.krdcorporation.com/
http://youseeads.com/

Feel Free to contact me or chat with me at

Yahoo chat- openxphp@yahoo.in

Gmail id - php.expert9@gmail.com,

Hotmail Id - softyramsupport@hotmail.com

Hotmail id - dreamajax@hotmail.com

Visit my site at: http://www.softyram.com

This is our company website ,

www.dreamajax.com

My linkedin profile link is www.linkedin.com/in/softyram

https://www.scriptlance.com/cgi-bin/freelan...rofile=softyram

looking forward from you.

Thanks and Regards

Maskertorun

[Embauche.Com]

Hi,

I'm facing the same problem. Do you have any solution ?

Thanks

[josh]

Same problem here, running 2.8.2

Ads are serving fine, stats appear ok in the database, but stats do not display on the admin frontend.

I tried update to 2.8.5 which did not resolve the problem.

I notice that today (2010-04-12) there are two "default manager" accounts (see working as dropdown at top right)

I checked nightly backups and the second "default manager" did not exist on 2010-04-09. Stats display fine from this backup.

[Spritz]

Looks like there has been a hacking mess during this weekend, as I've been fixing the very same problem a few times today for some customers. I don't like to spam the forums, but feel free to contact me should you require assistance.

[wpt]

Us too, same issue it seems. 2.8.2 also.

I don't see the 2 default manager accounts, but I haven't upgraded to 2.8.5 as for some reason it gave me a login error when I tried to login as administrator in the upgrade screen.

[davide101]

Us too, same issue it seems. 2.8.2 also.

I don't see the 2 default manager accounts, but I haven't upgraded to 2.8.5 as for some reason it gave me a login error when I tried to login as administrator in the upgrade screen.

I can confirm that I'm having the same issue including the two manager accounts.

[davide101]

From the audit log, it looks like the installer ran on Friday and inserted this weird stuff:

10-04-2010, 11:47:51 Installer updated User "" (#10) View
10-04-2010, 11:47:51 Installer inserted Account User Association "Account #39 -> User #10" View
10-04-2010, 11:47:51 Installer inserted Account User Association "Account #38 -> User #10" View
10-04-2010, 11:47:51 Installer inserted User "adm" (#10) View
10-04-2010, 11:47:51 Installer inserted Agency "Default manager" (#4) View
10-04-2010, 11:47:51 Installer inserted Account "Default manager" (#39) View
10-04-2010, 11:47:51 Installer inserted Account "Administrator account" (#38) View
10-04-2010, 04:01:07 Installer updated Client "" (#13) View
09-04-2010, 14:14:44 Installer updated User "" (#1)

[Spritz]

A bit more info, from an email I'm sending to my clients:

From what I could see there has been a mass infection of vulnerable 2.8.2 OpenX installs that dropped a backdoor and caused this statistics problem as a side effect. The backdoor can be used by attacker at a later time to inject malicious code in the system, even though in the instances I've cleaned up today it was still unused.

[Hawk Designs]

From the audit log, it looks like the installer ran on Friday and inserted this weird stuff:

10-04-2010, 11:47:51 Installer updated User "" (#10) View
10-04-2010, 11:47:51 Installer inserted Account User Association "Account #39 -> User #10" View
10-04-2010, 11:47:51 Installer inserted Account User Association "Account #38 -> User #10" View
10-04-2010, 11:47:51 Installer inserted User "adm" (#10) View
10-04-2010, 11:47:51 Installer inserted Agency "Default manager" (#4) View
10-04-2010, 11:47:51 Installer inserted Account "Default manager" (#39) View
10-04-2010, 11:47:51 Installer inserted Account "Administrator account" (#38) View
10-04-2010, 04:01:07 Installer updated Client "" (#13) View
09-04-2010, 14:14:44 Installer updated User "" (#1)

We checked the audit log and got identical data as quoted.

[Momchil]

problem solved! We had the same issue here. You need to clear the hacker's mess and stats will appear again. At least it worked fro us. Good luck to all .

[Hawk Designs]

Could you provide the information what has been infected/changed?

[Embauche.Com]

Hi,

Where can I find the audit log ?

Momchil, can you provide us the solution ? thanks

[empire]

OK I managed to solve this also.

First of all, you should clean all the infected files as discussed here.

Then you need to remove the users and accounts that the attacker added and changed and associate your own user as administrator again.

Everything works now.

The important thing now is to find out what exploit they used to infect those files!

[Embauche.Com]

Hi,

I remove the following code :

CODE

if (basename($_SERVER['PHP_SELF'])=='genericHtml.delivery.php') {
eval(gzinflate(base64_decode("...")));
}

in

CODE

/www/admin/plugins/openXBannerTypes/index.php
/plugins/bannerTypeHtml/oxHtml/genericHtml.delivery.php

I deleted a new user admin, the second default manager.

I linked the user to the administrator again but I still doesn't have any statistic.

Can you help me please ?