Hacked
 

Anyone familiar with Symlink hack? I just lost my forum, completely deleted using such method i was informed by my hosting company.

A hacker uploaded a c99 shell to my server and deleted all the data with it and used symlink aswell is what i was told. Anyway to prevent this from happening again?

Im so mad

Are all backups gone as well. Check logs to see how he got in

Curious if you still have the v4 files on your server, particularly the "install" folder.

No i dont Max, I was back on 3.8.7.

ForceHss luckily I had a backup. The only different thing I had was 2 skins I installed.
Would you guys be able to check if they were the culprit?

You need to ask your host how they got in they can check things you might not have access to

This does NOT mean you still don't have the vulnerable v4 files on the server.

Remove ALL instances of the install folder, regardless of version. Immediately.

Max i guess you didnt read correctly.. EVERYTHING GOT WIPED OUT. all files are gone from ftp

Chances are the shell was in one of those nulled scripts you had. This was why I told you twice to scan for malware. Those hacked versions always contain shell scripts and malware.

Hopefully up still have a back up downloaded to your pc.

It wasnt that Always had them. This happened as soon as I installed those 2 new skins :/

well I doubt it was the skins. Perhaps just coincidence.

Do you have a back up downloaded to your pc? If so you are ok.