Hacked! - Crashing hosting!

[imk]

ok so im guessing im hacked as when i login to admin panel my username is changed from K to Try Me.

and i cant login! I think they are sending out info but unsure how to check - and they keep crashing the host

how can i resolve this and unhack my site?

[Lynne]

I don't know what you mean when you say you login to the admin panel and your username is changed and then you say you can't login. So, which is it?

Check your access_logs and talk to your host to see if you were hacked and if they know how. You may have to reupload all your default vbulletin files and also reimport a backup of your database if you can't figure out what is going on.

[imk]

how do i check my logs? if i re upload will all my data like users etc all go?i mean i attempt to login!

--------------- Added 1291305615 at 1291305615 ---------------

is there a way i can take the site offline but keep all the data - and still use the mail?

then when i can affoard vb4 put it back online and update!

--------------- Added 1291306329 at 1291306329 ---------------

Basically whats the safest and best way to



Remove the site from my hosting - but make a SAFE back up of everything!

Then a few months down the line i can get vb4 and re uploaded everything!



please please break this down as im a major newb lol!

[Lynne]

If you don't know where your logs are, you should ask your host. Those are filled with stuff you may need as an admin.

I don't know what you mean about taking the site offline but still using the mail. The vbulletin mail script won't be running if you turn the forums off.

[imk]

the site is hosted at manlystuff.com - the email addy associated with this account is info@manlystuff.com which i use for all my mail - if i suspend the account i wont be able to use the mail

so all i want to do is take down the vbulletin part of my site but make sufficient backups so i can put it back online when i can affoard the vb4 update!

please explain how i would do this!

--------------- Added 1291307687 at 1291307687 ---------------

in great detail! :)

[Lynne]

You may close your vbulletin site and then your email should still work. Try running these queries, but put a prefix in front of the table if you use one:
UPDATE datastore SET data = REPLACE(data, '"bbactive";i:1;', '"bbactive";i:0;') WHERE title = 'options';
UPDATE setting SET value=0 WHERE varname='bbactive';

If you use datastore caching (a setting in config.php) then you will have to edit that also (or just turn it off since you won't need it with the board off).

[imk]

ive turned the board offline via admincp - but they must have admin access - cause they still crash the host!

i just need to remove the site - until i need it again please just explain how to do this!

[Lynne]

How did you turn it off via the admincp if you couldn't log in?

Just remove the vbulletin files if you don't want them accessing the site. Or change the folder name they are in.

If the board is turned off, what are they doing to crash it? Have you looked at the error_logs? You could be totally wrong about what is going on cuz none of this is making sense at all.

[imk]

well my username was changed so they must have turned it back on - at first i thought it was bad scrips and coded plugins - so i turned them all off - still got the problem!

now i cant access it crashes my VS every few days and i dont know what to do

btw im sure ive said im a real newb - so when u tell me to access error logs etc i rly dont know how!

[Michael.A]

man link me to ur site... is it the Male forum the one got hacked?

[FreshFroot]

No one can help you unless you provide better details.

What vB version are you using.

Have you contact your host to check things out?

Have you reuploaded your files for vB?

Also search on this forum for htaccess. This will help you add another security measure for your admin panel.

With all that done.. you should NOT be getting hacked anymore.

Oh also make sure all your mods are UP TO DATE! Some old mods can have exploits!

[imk]

i think its vb3.8

yes my hosts are useless!

the sites came back online shortly today - and i changed the admin url and cpanel password

now once again the sites are down and host has crashed

im beyond fed up!

forum is offline and all plugins disabled!