vb.org Archive - Hacked! What should I do now ??

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)

- - Hacked! What should I do now ?? (https://vborg.vbsupport.ru/showthread.php?t=192161)

Mean	09-28-2008 09:18 PM

Hacked! What should I do now ??

Somebody has hacked me, he has changed the index and changed my login info, what should I do now ??

Swampfox

09-28-2008 09:37 PM

upload index.php from the vbulletin installation files and overwrite the hacked one

you can probably use tools.php to recover your hacked account also, although I have never had to do that

Mean	09-28-2008 09:40 PM

I reupload allfiles but still the index is there. And I cannot login :S

Quarterbore

09-28-2008 09:58 PM

Go in with your FTP and see if you have an index.php3 file or something else.
Delete all cookies on your browser and try again.
Look for an .htaccess file and see if your site is opening a new file.
You do have backups, right: http://www.vbclassified.com/showthread.php?t=241

PHP Code:


		
			
<HTML><HEAD><TITLE>HACKED</TITLE>

<BODY bgColor=black>

<CENTER><IMG src="http://img135.imageshack.us/img135/2677/hacked2323gl7xg3.jpg"></LEFT></CENTER>

<center>

<DIV align=center>&nbsp;</DIV></TD>

<H1><FONT color=red><FONT color=white>| S3RD4R</FONT> | Siber-KorSaN |

</center>







<CENTER>

<H2><FONT color=white>A??klar?n?z? Kapat?n?z</FONT></H2></CENTER>

<DIV align=center>&nbsp;</DIV></TD>



<DIV align=center>&nbsp;</DIV></TD>

<CENTER>

<H2><FONT color=white>Sfev@W.cN - Siber_KorSan@Noldu.com</FONT></H2></CENTER>

<DIV align=center>&nbsp;</DIV></TD>

<DIV align=center>&nbsp;</DIV></TD>

Mean	10-07-2008 04:50 PM

Please help me, somebody has changed the admin password, I re upload all files but nothing changed. What should I do now ??

mac-warez

10-07-2008 04:57 PM

Use Tools.php To Make A New Admin Account

SEOvB

10-07-2008 04:59 PM

Upload tools.php into your adminCP folder and restore your admin account.

Next go revert your index template or whatever other template is effected, or remove the redirect. There are so many things that could be changing your front page so unless you post a link for us to go see to your site we won't be able to help very good without guessing.

After that, reupload all your files, and update your vBulletin, remove any modifications and plugins that aren't needed and update your passwords.

Mean	10-07-2008 05:04 PM

I uploaded tools.php, I see this
[Reset Admin Access] Reset admin access for a user

Which username should I write, and after that it doesnt question me the password ??

mac-warez

10-07-2008 05:07 PM

Dismounted

10-08-2008 06:18 AM

1. Register a new account.
2. Make this account admin.
3. Change the password on your actual account.
4. Remove or demote the newly created account.

All times are GMT. The time now is 02:34 AM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01036 seconds Memory Usage 1,739KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)bbcode_php_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: