Hacked forum help
 

Hi,

my vbulletin forum was just hacked by someone.
It is located at http://www.virtualtigers.com/vb I have currently closed the forum, and it seems to function fine right now.

But when I reopen it and click on the 'Forum' link, I get a page as shown in the picture in attachement.

So I suspect the 'hacker' changed something what alters the forum.php . But I have no idea how to adjust it back to original. Can anybody give me some pointers.
Or If anyone is willing to have a look at it, I would perhaps want to share my admin login details(via pm) so you can have a look.

thx

First off remove your install directory.

Follow these guides. Be thorough or don't even bother - no honestly you must be thorough no joke, this is being said with much emphasis these days!

http://www.vbulletin.com/forum/blogs...vbulletin-site
http://www.vbulletin.com/forum/blogs...ve-been-hacked
http://www.vbulletin.com/forum/blogs...vbulletin-site

Thx, will go trough them.

Good luck, man.

Also, check to see if your question mark icon - you know the little one in the ACP at the right of each edit topic etc - hasn't been hacked in to. Just click on it to check. My site got hit there so I deleted the file.

This came in handy for me too.

https://vborg.vbsupport.ru/showthread.php?t=193930

Refer to it after your clean up.

I had the same issue.

My next response is to delete every single file and start over (I have a DB backup so it will be fine).

However, all the VB install guides show version 5, how can I see a 4.2.0 patch 3 install guide? I've spent an hour looking for this already.

Any help would be appreciated. Once I get that far, and re-instate the DB, I can do a 4.2.1 upgrade.

Installing vB4 is no different that installing vB5 this is the vB install guide, http://www.vbulletin.com/docs/html/install

thanks

It should work, if you run into any issues report back. :)