I Need some Help

[DieselMinded]

ATTN : I have found over 20,000 of my posts and threads on another forum

http://www.tchatting.com/forum/index.php

Most of these posts were from the Admin/Mod section

What should i Do ?

[WhaLberg]

Someone has shared your database?

[DieselMinded]

These Threads Were from when i was Admin of A Forum I didnt own ,,, I Started my own forum and they got all POd and baned me and all my friends , Now all of a sudden All these threads show up on this other forum as well as my name i accutally loged in with my old password ect.... and most of the threads are from the admin section

Can someone from VB please check on this site as there is some serious bad things going on here , There Credit card numbers phone numbers and addresses ........

--------------- Added at 00:07 ---------------

There are some threads that i beleave the forum owner would not want on there as hes compaining and ranting on members and sponsors in the admin area ..........

--------------- Added at 00:08 ---------------

In the shout box..........

[Today 07:02 PM] DieselMinded: How Did you get these posts ?
[Today 06:55 PM] DieselMinded: What is this Place?!
[Today 06:55 PM] DieselMinded: Not to mention Phone Numbers Addresses & Credit Card Information!!!
[Today 06:47 PM] DieselMinded: Some of the Threads That have been copied here can be detrimental to the likeness of the posters as it was behind closed doors
[Today 06:32 PM] DieselMinded: These
[Today 06:32 PM] DieselMinded: Were Theres Threads Sold to You?
[Today 06:31 PM] DieselMinded: You Have Over 10,000 Posts From the Admin/Mod Section Of Another WebSite
[Today 06:31 PM] Moe: can you explain more and give me the link to check it ?
[Today 06:08 PM] DieselMinded: Yes There are a Ton of Posts on this board that were not Posted on this board How did this happen?
[Today 04:38 PM] Moe: diselmind , may i help you ?
[Today 03:54 PM] DieselMinded: lol just checking
[Today 03:48 PM] Whitmore: we do ya knuckle head
[Today 02:25 PM] DieselMinded: Who Owns This Forum?

--------------- Added at 00:08 ---------------

I Need some advice Please

[pitzerwm]

Lots of luck, this is the owner:

Mohammad Ghaoui
Old Saida Rd.
Beirut, lb 00961
Lebanon

[DieselMinded]

Can people sell there old posts?

--------------- Added at 00:20 ---------------

Thanks for the owners Info

--------------- Added at 00:50 ---------------

Is this Against the Law even if your out of the USA?

[MnTom]

This is something I find quite upsetting. I have never posted on there and I have over 3000 posts. All are from the same forum that DieselMinded is referring to when I was an Admin there too. Seems to me that there might be some serious legal issues here? Anybody have any ideas?
Tom

[DieselMinded]

[Today 08:53 PM] 88bird: obviously they were imported as to all the names with imported in front of them..... looks like someone sold out
[Today 08:28 PM] MnTom: Are they stolen?
[Today 08:28 PM] MnTom: Where did you get the posts?
[Today 08:28 PM] MnTom: How do you PM CraCker when his PM box is full?
[Today 08:07 PM] Moe: and take care all
[Today 08:07 PM] Moe: have a nice day/night
[Today 08:07 PM] 88bird: is CraCker Andy?
[Today 08:07 PM] Moe: and he will answer all the questions you want
[Today 08:07 PM] Moe: guys now i have to leave, and everyone have a question please PM CraCker
[Today 08:06 PM] Longhorn: I did NOT register here......
[Today 08:06 PM] DieselMinded: I never signed up here
[Today 08:06 PM] DieselMinded: Do you purchase these threads?
[Today 08:06 PM] Moe: Registered Members: 40,436 | Total Threads: 41,297 | Total Posts: 547,519
[Today 08:06 PM] Moe: and you can check our statistics
[Today 08:06 PM] DieselMinded: You Purchansed there threads?
[Today 08:06 PM] Longhorn: I did not join this site....
[Today 08:06 PM] Moe: non of what you said
[Today 08:05 PM] DieselMinded: as well as all the members who Posts were either sold to your of stolen
[Today 08:05 PM] DieselMinded: Vbulletin.com has been notified and your host is being notified
[Today 08:05 PM] Moe: longhorn i was telling 88bird that there is a merge btw the websites

--------------- Added at 03:14 ---------------

[Today 10:06 PM] 2001shrtbedcummins: wtf is this about...
[Today 10:06 PM] 2001shrtbedcummins: I've never even heard of this site
[Today 10:05 PM] Tomeygun: this site SUCKS!
[Today 09:58 PM] 2001shrtbedcummins: this is bull****
[Today 09:23 PM] Whitmore: this horse**** is a bunch of bull****
[Today 09:23 PM] Whitmore: its all bout the $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
[Today 09:18 PM] 88bird: neither is mine and i didn't register here either
[Today 09:11 PM] MnTom: Also I have NOT registered here
[Today 09:11 PM] MnTom: Mine does not say imported in front of it
[Today 08:53 PM] 88bird: obviously they were imported as to all the names with imported in front of them..... looks like someone sold out
[Today 08:28 PM] MnTom: Are they stolen?
[Today 08:28 PM] MnTom: Where did you get the posts?
[Today 08:28 PM] MnTom: How do you PM CraCker when his PM box is full?
[Today 08:07 PM] Moe: and take care all
[Today 08:07 PM] Moe: have a nice day/night
[Today 08:07 PM] 88bird: is CraCker Andy?
[Today 08:07 PM] Moe: and he will answer all the questions you want
[Today 08:07 PM] Moe: guys now i have to leave, and everyone have a question please PM CraCker
[Today 08:06 PM] Longhorn: I did NOT register here......
[Today 08:06 PM] DieselMinded: I never signed up here

--------------- Added at 03:40 ---------------

From the owner or the hacked forum...

Hello everyone!

I got the call tonight about the lebanese website, tchatting.com. It appears they have threads, posts, and members from our forum.

Several months ago before we moved to our new server cluster I mentioned to some folks that our previous server had been compromised. Meaning it had been hacked and damaged. They did not hack Cummins Forum.com directly, but they must have somehow grabbed a backup that I had of it.

Anyways, all that to say, these guys have been roaming the internet, hacking and stealing. Their end goal is to build a HUGE website and sell it. If you type in "tchatting.com" in google, you will notice that they have the "tchatting" for sale on several web hosting sites. They are boasting HUGE membership and HUGE thread count.

Now, do not worry, they do not have your passwords. All of your passwords are MD5 protected, so you should not have to worry about a compromised password.

I am getting on the phone right now, trying to get in touch with my former hosting company to tell them that I found the culprits. I will keep everyone updated here.

--------------- Added at 04:13 ---------------

WAS YOUR INFO STOLEN ????

http://www.tchatting.com/forum/index.php

[YMMOT]

Lebanon has written hacks here... they NEED TO BE REMOVED. He apparently has created some kind of exploits in his hacks!!!!!

[DieselMinded]

https://vborg.vbsupport.ru/showthread.php?t=158701&highlight=Lebanon

--------------- Added at 05:17 ---------------

vBulletin 3.6 Modifications (Releases: 5, Installs: 346)
[3.6.5] More Livescores Formula -Basket -Baseb ... [v2.0.1] 27 Apr 2007 Never 22
[3.6.5] Contact's Inviter MSN/Yahoo/Gmail & ... [v1.00] 27 Apr 2007 30 May 2007 117
[3.6.4] VBSoccer V2 +NFL Livescores [v2.00] 01 Feb 2007 10 Mar 2007 72
[3.6.1] VBKeepLink GoogleVideo, Metacafe, Yout ... [v1.00] 30 Sep 2006 Never 46
[3.6.1] T-VBhoroscopes Addon -daily updated co ... [v1.00] 24 Sep 2006 Never 89
vBulletin 3.5 Modifications (Releases: 3, Installs: 135)
[3.5.4] Alpha: VBSoccer Tennis Cricket Formula ... [v1.00] 05 May 2006 20 Jan 2007 77
[3.5.0] Cpanel Email per username -Simple exte ... [v1.00] 06 Mar 2006 08 Mar 2006 33
[3.5.0] Vbulletin Amazon Store [v0.9] 02 Mar 2006 Never 25
vBulletin 3.0 Modifications (Releases: 1, Installs: 4)
[3.0.5] VBGoogle 4 Logician webtemplates [v1.00] 15 Jun 2005 Never 4

[Marco van Herwaarden]

Isn't this the second thread on the same topic you have started?

[YMMOT]

Isn't this the second thread on the same topic you have started?


Here is an idea. Instead of coming down on the guy that is bringing a security problem to light, Why don't you remove hacks written by a guy that is known to be stealing other vBulletin users databases? The user Lebanon is your problem, not DieselMinded!!!!!


I AM an owner of vBulletin and so is DieselMinded. He just doesn't own the vBulletin that was hacked.

*** Flame removed ***

[DieselMinded]

Isn't this the second thread on the same topic you have started?

Yes , I am sorry New information came up I posted a link to the new thread here .

DM

[Marco van Herwaarden]

Here is an idea. Instead of coming down on the guy that is bringing a security problem to light, Why don't you remove hacks written by a guy that is known to be stealing other vBulletin users databases? The user Lebanon is your problem, not DieselMinded!!!!!
Please do not jump to conclusions and stay with the facts.

Fact: Someone posted on WHM trying to sell a website, for which it is claimed that the owner has "stolen" database(s).
Fact: The person that created the post on WHM claims to be the same person as the coder named "Lebanon" on vBulletin.org.

Unless there is proof of this, or proof that the modifications that are released at vBulletin.org contain mallicious code used to steal databases or passwords, there is nothing here at vbulletin.org to do about this.

Also all there is, is claims that databases are stolen. If/How this is done is totally unclear. As long as that is not known, we do not know where (if?) the alleged security problem is. Warning in general terms without knowing the reason is absolutly not productive and useless.

[ablaye]

Here is an idea. Instead of coming down on the guy that is bringing a security problem to light, Why don't you remove hacks written by a guy that is known to be stealing other vBulletin users databases? The user Lebanon is your problem, not DieselMinded!!!!!


I AM an owner of vBulletin and so is DieselMinded. He just doesn't own the vBulletin that was hacked.

*** Flame removed ***

The issue is still under investigation.
I would like to find out more about it.

[JanMS]

It would appear that tchatting took a massive jump in "membership" between May and June of this year if you take a look at www.archive.org. From 4,000 to 39,000.

[WhaLberg]

I guess DM must be more clear.

[djdonx]

I also notice that in the May shot, the red forums aren't there but in June, 3 or 4 sections and 35000 members have appeared.

[YMMOT]

Please do not jump to conclusions and stay with the facts.

Fact: Someone posted on WHM trying to sell a website, for which it is claimed that the owner has "stolen" database(s).
Fact: The person that created the post on WHM claims to be the same person as the coder named "Lebanon" on vBulletin.org.

Unless there is proof of this, or proof that the modifications that are released at vBulletin.org contain mallicious code used to steal databases or passwords, there is nothing here at vbulletin.org to do about this.

Also all there is, is claims that databases are stolen. If/How this is done is totally unclear. As long as that is not known, we do not know where (if?) the alleged security problem is. Warning in general terms without knowing the reason is absolutly not productive and useless.


FACT: I know many of the guys personally that are up in arms about this.

FACT: Lebanon is tied to this tchatting.com

FACT: Lebanon writes hacks on this site.

FACT: Tchatting has several thousand posts that can be found on Cummins Forum that are EXCATLY identical.

FACT: The OWNER of Cummins Forum has indicated that his database has been hacked.

FACT: Lebanon has a Link to his site that is tchatting.com in his signature. The same Tchatting.com that has stolen posts and thread from Cummins Forum

FACT: The server is hosted by Godaddy.com, and I and many others have and will be contact Godaddy.com in regard to tchatting.com's abuse.

Looks like a simple 1+1 problem here to me. This is NOT flaming just facts.

If you feel the need to give me ANOTHER infraction for stating FACTS. Then so be it.

[DieselMinded]

WOW , I place 100% faith in Vbulletin.org to look into this and do what ever correct actions they wish .

It was not my site that was hacked but a site i used to admin and i have over 4000 posts on www.vchatting.com that I do Not want there

Thanks to all the Vbulletin Experts for continuing to dig up more and more information , all you have to do is go here and see that somethings not right here , And why are there posts still here?

http://www.tchatting.com/forum/general-cars-and-engines-discussions/48903-i-have-never-posted-on-this-site.html

[Marco van Herwaarden]

WOW , I place 100% faith in Vbulletin.org to look into this and do what ever correct actions they wish .
....Thanks for the confidence. Be assured that we are already looking into this issue, but only from a vBulletin.org point of view. If there is anything that could possibly harm our members (in relation to vB.org) then be assured that we will take appropriate actions.

[MnTom]

The owner of the hacked site claims "Now, do not worry, they do not have your passwords. All of your passwords are MD5 protected, so you should not have to worry about a compromised password".
Well, I can tell you that MY name AND password are on there. All of us from the hacked site can log onto the site. My name and password was changed back in January of this year and it is my old info that works there.
Tom

[Dismounted]

He does have your passwords but they are double-MD5'd and salted so you shouldn't need to worry about them.

[YMMOT]

MnTom. Your password will work because it is stored in the database, but it is stored in a manner that cannot be read by anyone.

Here is an example of a user password as the database stores them:
25f6660af7d6e26862e501f6a1ae01de

[lebanon]

WOW
ALL THIS LAME ACCUSATIONS MUST BE STOPPED.

first of all, my hacks are open source and no bugs.
Second , why havent you mr contacted me about this >

The only problem now, is that 3 months ago i had an offer to merge a database of a forum for sale, i asked how big, what about and i purchased ... now if this was yours or so
I suggest you contact me with your info, where is the original threads at ) the threads you claim i have stolen,
I cant see also why this turned to be a Credit numbers and stuff, i purchased a forum data no more.
If this content would seem to be a trouble ill gladly remove it as no great impact on my forum was made.
Nevertheless Ill be very glad for your proof, as this concerns me being frauded and sold a stolen data, and that will then result in sharing the seller's name and contact too.
But before you go all the way, and start accusing people , it would have been much understood if you at least contacted me.
One last thing, Moe who talked to you on chatbox is a friend and not me, my nickname there is Lebanon or cracker , and as for me, my name is Mohammad Ghaoui, and pitzrwn your comment about good luck about that is a bit stupid and childish.
I dont built my job and work using theft and hiding information.
My info is true and my websites have my info all over them along with physical addresses, and being in Lebanon does not make me legible to theft. (Period )

--------------- Added at 17:37 ---------------

another thing, i would have replied earlier expect that i had an accident 3 weeks ago and since am not joining online much.
If you want to discuss this , whether in public or private ( same to me ) , then as a start you are asked to mind you language and before spreading bull about me, talk to me NOT on me.
Ill be reviewing this thread and providing your desired Q's and A's

[Lizard King]

There is one thing that is for sure correct lebanon is using a pirated copy of vbseo which can be found @ (http://www.tchatting.com/forum/vbseocp.php)
so all the claims may be true.

A person who use pirated software can easily lie. I have no information regarding other mentioned boards etc. but i hate people who use pirated software and i never trust what they say.

[Michael Biddle]

vBSEO 3.0.0 nulled by...

LMAO

[DieselMinded]

Lebanon I was not the Owner of the datase but i was running the boards at that time Please remove DieselMinded and all his posts from your site www.tchatting.com , If this info was indeed sold to you then thats a whole diffrent animal all together and i dont want no part of it other than my infomation removed as you have admin/mod posts/threads all over your board with private information in them Thanks

DM

[Alibi]

It would appear that tchatting took a massive jump in "membership" between May and June of this year if you take a look at www.archive.org. From 4,000 to 39,000.

autoposter lite will achieve the same thing

[DieselMinded]

These posts were exact duplicates of posts on another forum , All the members are Mad because there information was sold/Stolen to a 3rd Party This is going to be a huge mess if Lebanon is Telling the Truth And I DO NOT WANT INVOLVED ALL I WANT IS MY POSTS/THREADS REMOVED From www.tchatting.com

DM

--------------- Added at 01:13 ---------------

http://www.tchatting.com/forum/general-cars-and-engines-discussions/48910-lebanon-cracker-mohammad-ghaoui-new-post.html

[MnTom]

Lebanon, IF what you say is true and you bought the data, DELETE my username from your site and all my posts also. I was an Admin on the site where the info came from and do not wish to be on your site.
MnTom

[YMMOT]

I dont built my job and work using theft and hiding information.

Then explain your pirated vbseo.

There is one thing that is for sure correct lebanon is using a pirated copy of vbseo which can be found @ (http://www.tchatting.com/forum/vbseocp.php)
so all the claims may be true.

A person who use pirated software can easily lie. I have no information regarding other mentioned boards etc. but i hate people who use pirated software and i never trust what they say.

I'm with Lizard King... Lebanon is using pirated software. Kind of puts credibility in question if you ask me.

[lebanon]

YMMOT thats a long story but i have a huge log with Juan about this and the download ability they removed from my account + actually THEY OWE ME A LICENSE, but again i dont have to prove you that part, all i know is that am using something they DID charge me for then they upgraded something and my account data was not anymore accessing downloads , they told users to contact them to fix forever who had a problem, well i had one and they didnt fix it, they kept saying they cant see it , can see bla bla bla ...
(i still have the email and PM showing my Website License sent by THEM) but since they disabled my access to new versions, YES am using a pirated version but only because AM ENTITLED TO and i PAID FOR IT originally ...

NOW YES ITS A DELIGHT TO SEE EVERYONE JUMPING TO CONCLUSIONS JUST BECAUSE THEY LOVE TO TRASH ....
and also its delight to know that everyone claims to be so PURE and can judge me ! ( congrads people you just proved you are saints or better ) .. hang me !@

As for forum actions : general cars section ( section in question ) has just been dropped.
user mntom and all relative posts should be deleted accordinaly, so do user
DieselMinded ...
I am going to strip the database sql i had in part ... and remove the relative users.
One last thing, before i did the merger i did announce this and dont all think all the users are from that database, most of it are from arabic forums i have, this was an external db i was offered and seems i did a lousy job accepting it.

[DieselMinded]

Thanks

--------------- Added at 21:01 ---------------

Lebanon Has Complied and Removed the Stolen then sold to him content

Thanks To ME

As the Person who was Stolen from Is Slandering My Name and My Site , When im the one who got it all taken care of , To all the Members with there info stolen Your Welcome

DM

[Marco van Herwaarden]

As both sides seem to agree that this issue is getting resolved, and the reason was different then some members at first suspected. I feel it is time to close this thread as there is nothing more here that involves vBulletin.org or it''s members.

Closed.