Please Help

[HHelp1]

Hey guys, my forum just got hack like they redirect my site to they site. And i did not give any 1 FTP but my folder vb got deleted... When i reinstall that person hacked me again... do u know how he did? and how to solve it ?? PLEASE HELP ME IM BEGGING PEOPLES>>>>>

[gazza2008]

Have you accepted any files of anyone. You could of been keylogged.

Unless you have a backup am afraid you may need to re-do the forum again

[HHelp1]

I did not give files to any one... I tried reinstall twice but he still hacked and changed FTP and host but still!!... he said he exploited it :( IM beg peoples please help me

[Big Al]

gazza2008 has a valid point.

One possibility is that the hacker has hacked your PC with a keylogger and now has all your passwords etc.

The first thing to do is to check.

Download SOPHOS from the web and install the free "anti-root kit" and run it.
It will find and remove certain keyloggers.

A good free AV to run is "Malwarebytes" Many have reported very good results by using it.

As far as your site is concerned, I am sure that some of the more techy people here could offer you assistance.

It is a shame, but some hackers are the lowest of the low and so are those that support them for their own benefit. Some webmasters and support staff actually support them, hard as it is to believe.

It would be prudent to change your passwords on a very regular basis and especially now that you are having security concerns.

I hope that you can fix the problem easily. AL

[conradk]

Depending on the web hosting service you use, your password at your control panel could have been compromised. Don't leave your passwords at defaults as other users on the web hosting service already know how to connect already. Report the perp's site to your web hosting provider.

Use a unique structure in your web content area. If you feel that you are being exploited through MySQL or PHP code, then make sure you change the names of your files. i.e. I was getting constantly harassed and had to change the name of my admincp.html and put a blank admincp.html file its place. In fact, maybe not a bad idea to put empty folders and files at the previously exploited locations.

Unfortunately it is possible to leave cookies in your MySQL database, or in your php files. Look for modification dates that correlate with the hacking activity. I had this - and used this as a guide as to where to put the blank/bogus files.

[Max Taxable]

Do you use the CMS or just the forum software by itself? Can you provide a link to your site?