Quote:
Originally Posted by Dismounted
Either a modification has been compromised, or the server has been compromised. Contact your host. Also change your cPanel/FTP passwords.
|
I am contacting my host right now, I am on a VPS and I have been checking the server logs for anything weird, but I think my admin is better to find something if there is something..
I would of thought, though, if they got into the server through a backdoor or something, they would of effected my other accounts. I have VB running on another account for another site, and a few other accounts with various programs that were not touch (and have been on there for a very long time)
Here is the list of my mods,
I have ibProArcade v.2.6.8 which this file structure was changed I noticed.
Here is a list of my other mods:
Admin Log In As User
Cyb - Advanced Permissions Based on Post Account
Fake User (adds a couple guests)
GTSmilieBox
Panic Button
Plus Mood
vB Ad Management
vBadvanced CMPS
vbSEO Site Map
Welcome Headers
--------------- Added [DATE]1238915113[/DATE] at [TIME]1238915113[/TIME] ---------------
Maybe someone can chime in?
This guy is getting FTP access, I have formatted all my pcs to make sure I don't have a virus, and my host is looking through everything as well.
Thing that throw my interest:
Sat Apr 04 17:14:52 2009 0 81.17.252.160 6448 /home/theangry/public_html/arcade/cat_imgs/index.html a _ o r theangry ftp 1 * c
Sat Apr 04 17:14:53 2009 0 81.17.252.160 6699 /home/theangry/public_html/arcade/cat_imgs/index.html a _ i r theangry ftp 1 * c
Sat Apr 04 17:14:54 2009 0 81.17.252.160 22447 /home/theangry/public_html/arcade/functions/dbclass.php a _ o r theangry ftp 1 * c
Sat Apr 04 17:14:55 2009 0 81.17.252.160 24228 /home/theangry/public_html/arcade/functions/dbclass.php a _ i r theangry ftp 1 * c
Why the arcade first? Compromised maybe? I deleted the folder when I did a backup, I also disabled my FTP server...