My forum has been hacked.

[thekramershow]

Forum:

http://kramersforum.com/forum/index.php


My forum is for my radio show. It has a good size amount of people on it and it has thousands of unique visitors daily.

Last night one of my Mods texted me and said it had been hacked. It had some weird thing at the top, gloating that they'd hacked it and invited people to some chat room.

This morning the guy who runs our server sent me a message and said that they had reset the servers and that although some of the information would be lost, it would be back up by this morning.

Here is the message that appears there this morning as of right now:

Too bad you can't change it back, huh? Add me on skype, please! I am a lonely f*g! - aunstic

My tech guy says that vBulletin was hacked, not the servers.

How do I resolve this problem?

[Adam H]

Upload the files again , they have just changed the index.php as your internal pages are still working fine :

http://www.kramerforum.com/forum/showthread.php?53340-SM-1-Seymour-Duncan-review

Once fixed make a full backup and start the long process or working out how they got in, I doubt its VB from the damage they have done.

[thekramershow]

http://www.kramerforum.com/forum/sho...-Duncan-review

That isn't my forum.

--------------- Added 1346757123 at 1346757123 ---------------

There is an "S" at the end of kramer.

[Adam H]

Oops , Ok this one : http://www.kramersforum.com/forum/showthread.php?t=63671

And in that case you also need to update to the latest stable version of VB, its quiet possible that they got in through VB if you have no kept it all upto date when security patches have been brought out.

--------------- Added 1346757578 at 1346757578 ---------------

You might also want to login to the admincp and check the forumhome templates etc to make sure it isnt them thats been changed.

[thekramershow]

I know this is a stupid question, but how do I update my forum?

[Adam H]

I know this is a stupid question, but how do I update my forum?

Take a look at this : https://www.vbulletin.com/docs/html/upgrade

[thekramershow]

I'm in the forum. Any ideas on how to change the index back?

[LouiseWilson]

hello,
Try giving this mod a bash
https://vborg.vbsupport.ru/showthread.php?t=281080

if not ... you should keep daily backups :P

[Adam H]

I'm in the forum. Any ideas on how to change the index back?

Have you copied across all of the vbulletin files , replaced the index.php and upgraded the forum ?

Once you have done that if the problem is still there then its likely to be your forumhome template thats been edited , which you can revert by going to :

Styles and templates - search templates- type "forumhome" - you will then see it highlighted, click on it and click revert. ( any customisations you have for forumhome will be removed, but at this stage you have no choice if it is the forumhome which has been edited )

--------------- Added 1346758726 at 1346758726 ---------------

hello,
Try giving this mod a bash
https://vborg.vbsupport.ru/showthread.php?t=281080

if not ... you should keep daily backups :P

VB3 version of it is here : https://vborg.vbsupport.ru/showthread.php?t=220967

[thekramershow]

Why do people do this? Are they bored with their lives that they just pick random sites to be an ass to?

I thank you guys for all of your help!!!!!!!!

[John Lester]

You should also read this thread completely, https://www.vbulletin.com/forum/showthread.php/393227-Preventative-How-to-avoid-being-Hacked-by-TeamPS-i-e-p0wersurge

Make sure to run the queries posted by Wayne.