View Full Version : site HAcked---Urgent
Osama11
04-11-2009, 05:26 AM
my site is getting hacked again n again..
i just did the backup data 30 mins ago n upgraded the scripts.,
AGAIN its get hackeddd...
i have vbulletin. 3.8.1
n my site is still hackeeed
help me how can i fixx my site .. n how can i secure my site..
plzzz help me guysssssssssss
www.onlinedesiclub.com
Swampfox
04-11-2009, 09:38 AM
looks like they are just replacing your index.php page with their own, you can still access your site by going to other pages directly
obviously they have access to your server file system, its not necessarily a vbulletin issue, change all of your passwords including your server password and look at moving to a more secure host
dxflw
04-11-2009, 10:01 AM
Maybe format your pc first beacuse is possible that you have a keylogger ready installed to you pc and thirds persons knows your passwords and can easy access.After the format change all the passwords you use and then replace all your site files. And i think is important to delete all your forum styles and install again from the beggining.That will clean all your templates.
I m not sure 100% if that will finish your problem but its one possible way.
Osama11
04-11-2009, 04:01 PM
some 1 plzz help me how can i solve this isssue
Phobos49
04-11-2009, 04:04 PM
some 1 plzz help me how can i solve this isssue
Change FTP-Password!!!!
Osama11
04-11-2009, 04:06 PM
i did every thing ..
but still its happeneing
Mellymonster
04-11-2009, 04:20 PM
Do this, go to your FTP, and see if there is a different page as in for the index, I've had this happen on one of my sites, its just a Index injections. You should just beable to remove the index they injected, and then change your index back to index.php...
Osama11
04-11-2009, 04:25 PM
Do this, go to your FTP, and see if there is a different page as in for the index, I've had this happen on one of my sites, its just a Index injections. You should just beable to remove the index they injected, and then change your index back to index.php...
i did delete it ... but again. again they r hacking my site..
how can i secure my site
Lynne
04-11-2009, 04:55 PM
As suggested in post 3, perhaps you've got a keylogger on your PC. If you keep changing the password, and they are immediately getting in again, it sounds like that is a good possibility.
Osama11
04-11-2009, 08:45 PM
As suggested in post 3, perhaps you've got a keylogger on your PC. If you keep changing the password, and they are immediately getting in again, it sounds like that is a good possibility.
how can i delte key looger from my cp.
do i have to reboot the computer?
Carolyn
04-11-2009, 09:17 PM
I had to beef up my .htaccess file when I got hacked...just a thought.
http://httpd.apache.org/docs/1.3/howto/htaccess.html
http://www.javascriptkit.com/howto/htaccess.shtml
Lynne
04-11-2009, 09:47 PM
how can i delte key looger from my cp.
do i have to reboot the computer?
I think you need to do much more than just reboot your computer. I suggest you google it. (I'm on a Mac and have no clue about what you should do.)
ftechuk
04-11-2009, 10:03 PM
When we started building a few Joomla sites, they got hacked regulary at the start till we hardened the server and tightened up permissions.
Backup your site. FTP into your public_html folder and sort the files by date order. This will show you the newest files in there or the when the files where last changed. You should go through every directory as you never know how deep into the folder structure the hack goes. Look for new files/files that have been changed recently. Apart from the index.php page which you say you have changed, if you havent installed anything new, any new files will be part of the hack. Delete them, replace your index.php again, then get someone who knows how to harden up your server/site to do it.
Just a thought, but check any image folders first, usually these have write permissions on them and thats how the hackers get in.
dxflw
04-15-2009, 12:32 AM
Some keyloggers easy very hard to find with a simple home antivirus or internet security software.The best software about is antivirus for companys like SOFOS (about 1000 $$).
I think my friend you should format your pc.Save the very important files from your pc and offcourse your site backups (if you have) and then begin the new installation of your OS.
Don't copy any .exe files or files you dont know about it with your important files for the backup.After the format make sure you have installed a good antivirus or better internet security software (payed licence not cracked) and then change all your pasword you are using in the internet.
This way maybe (not 100% sure) will solve your problem.If not i don't know how to continue.
Better contact you hosting company after the format.
--------------- Added 1239759477 at 1239759477 ---------------
One think:
If your are webpage owner or you use your pc with the internet for important and sirius work then never trust something you don't know and never use cracks or cracked software (warez)
Use only original programs to have your head in silence.lol
bleros
04-15-2009, 12:44 AM
Lynne has the right
Keylogger you have Osama in your pcc format and you must change all the password ..
dxflw
04-15-2009, 12:50 AM
Beacuse i dont think that you know how to format your pc the better way is to bring a technical to your pc.
inder123
04-15-2009, 06:40 AM
format your pc , or use latest kaspersky , with update , and after formatting , change all your passes with necessary other changes and then try!
vBulletin® v3.8.12 by vBS, Copyright ©2000-2025, vBulletin Solutions Inc.