vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB4 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=251)
-   -   Hacked by Team Animus? (https://vborg.vbsupport.ru/showthread.php?t=263202)

EuroBeat2 05-06-2011 03:16 AM

I've got hacked. I hope I got it back, but for some reason my "user titles" are gone. Like "junior fellow" "senior fellow" etc. Any suggestion? I tried to repair tables etc, but not to avail.

Tx

EB

Frosty 05-06-2011 03:22 AM

Quote:

Originally Posted by Valter (Post 2192298)
I'm still wondering how they added files.

There must be something more than Forum Rules add-on.

After they got into the Admin Panel they could have easily add a plugin which would allow them to upload something on the site, i.e php shell for modifying of the current files, or uploading of the newer files.

SilentSleeper 05-06-2011 05:13 AM

Quote:

Originally Posted by EuroBeat2 (Post 2192547)
I've got hacked. I hope I got it back, but for some reason my "user titles" are gone. Like "junior fellow" "senior fellow" etc. Any suggestion? I tried to repair tables etc, but not to avail.

Tx

EB

1. Go in (phpMyAdmin) or SSH connecting
2. Open table user
3. Run SQL query
Code:

UPDATE user SET customtitle = '0' where customtitle = '1'
4. Then: Update the counters - Update User Titles and Ranks

Kangaroo666 05-08-2011 03:33 AM

Thanks for all your help Valter.

0ptima 05-09-2011 01:42 AM

Was everyone who got hacked using the Advanced Forum Rules?\

Suiram 05-10-2011 02:33 PM

Quote:

Originally Posted by 0ptima (Post 2193493)
Was everyone who got hacked using the Advanced Forum Rules?\

i was only using that mod and the vb forums - nothing else. so to me, it's clear what it was. lesson learned. i will never us another mod again. yes, really.

The Realist 05-10-2011 04:57 PM

Since updating this poor mod Cyb - Advanced Forums Rules I've followed the above and all looked great until today.

Came hole from work and I could not find my forum so I FTPed in and all my files, the lot have been removed and site is now no more. Team Animus was the original hackers but I think they installed a backdoor and then regained access and deleted the lot.

Not happy because Im not running and backups locally and hoping my host has backups.

May reupload Vbulletin fresh and hope the database is ok.

Regards

TheLastSuperman 05-10-2011 05:34 PM

Quote:

Originally Posted by The Realist (Post 2194109)
Since updating this poor mod Cyb - Advanced Forums Rules I've followed the above and all looked great until today.

That mod is not "poor" in fact as other staff members have posted recently about this subject, the code has been there for years and just now discovered as a exploit the same thing can be said about countless other softwares. Do you see vBulletin being sued for someone not patching their site when a exploit is found? No in fact everyone knows or should know it's falls on you and solely you if not patched. Further more that's just simply not fair to say despite what your going through, YOU installed it correct? Don't get me wrong I'm not saying you can't feel "wronged" I'm simply saying if you point that anger towards someone it should not be Valter's mod you've been using and enjoying for a while now, it should be those who defaced your site respectively.

The Realist 05-10-2011 07:17 PM

Point taken.

Quote:

Originally Posted by TheLastSuperman (Post 2194130)
That mod is not "poor" in fact as other staff members have posted recently about this subject, the code has been there for years and just now discovered as a exploit the same thing can be said about countless other softwares. Do you see vBulletin being sued for someone not patching their site when a exploit is found? No in fact everyone knows or should know it's falls on you and solely you if not patched. Further more that's just simply not fair to say despite what your going through, YOU installed it correct? Don't get me wrong I'm not saying you can't feel "wronged" I'm simply saying if you point that anger towards someone it should not be Valter's mod you've been using and enjoying for a while now, it should be those who defaced your site respectively.


GRJoker 05-11-2011 07:24 PM

When I try and run the Query and it does not allow me to do so, Where exactly do you have to go and do the Query?


All times are GMT. The time now is 02:46 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01392 seconds
  • Memory Usage 1,740KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_code_printable
  • (5)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete