My hacked solution

[dlewisr]

Not as in my idea... just that this is what worked for me.

I woke up to a hacked site this morning, as it seems many others did.I was hacked by a Syrian Regime group/supporters.

I followed the links that I had seen Lynn post to others that had been hacked and for me, the solution was almost the last on the list after trying everything else. I'm not trying to take the credit for it, I'm definitely not that clever but it was so simple a solution, that I thought I would add it here to try first.

The link as posted by Lynn is:

http://www.vbulletin.com/forum/blogs/zachery/3993888-fixing-your-site-after-you-have-been-hacked

The solution for me was number 7 'Final Clean ups: Check your Announcements, AdminCP > Announcements > Announcement Manager, make sure everything here looks correct.

When I checked, there a message from the hackers saying who they were and why they had hacked me. I deleted that and everything was back to normal. In saying that, I'm still following the rest of the advice to (try to) prevent it happening again.

Good luck to those who have been hacked and I hope the solution is as easy as mine was..... even if I had spent all day trying everything else!!!

[Merriweather]

Thanks for sharing... after an hour searching files, templates, the DB and announcements... I found mine in the notices!!

[dlewisr]

Glad it helped. Not so lucky today though, I have been re-hacked. My own fault as I forgot to remove the installs folder!!! Cleaned it up but have a problem with restoring the default files.

[ozzy47]

Well that's a bummer, hopefully once you get it sorted again, the install directory will be gone. :)

[dlewisr]

Well that's a bummer, hopefully once you get it sorted again, the install directory will be gone. :)

:o Shame on me!