Hacked - Help Needed

[Bacon Butty]

Click the "home" link and you'll see a hacked message

The forums are still viewable like....



What should I do?

[Edit] Removed their message but viewable here;

http://img5.imageshack.us/img5/1594/hacked1iq7.jpg

[Armageddonz]

I think this is very serious.
He probably uploaded a shell via your ftp and root your box.
Your site got defacecd, go contact your ISP and report that douche.

[Bacon Butty]

Cheers but dont understand that. Why contact my ISP?

Will contact host asap though...

[Armageddonz]

To get the ip logs of him.

[zelnik]

Originally Posted by Bacon Butty

www.GrandOldTeam.com/forum/

Click the "home" link and you'll see a hacked message

The forums are still viewable like....



What should I do?

Check your server logs to see if it gives any indication of how it was done.

Contact your host to work out if your server was hacked their end or someone has installed a keyboard logger on your machine at home and just logged into your account with the login/password. Do you use the same password everywhere?

If you want to get the site back up and running quickly then get your password changed with the host company and just change the index to forward to your forum.

[Armageddonz]

Who did you actually offend to do something so nasty to you?
Pft.
That guy should srsly spend some time in jail.

[Bacon Butty]

Originally Posted by zelnik

Check your server logs to see if it gives any indication of how it was done.

Contact your host to work out if your server was hacked their end or someone has installed a keyboard logger on your machine at home and just logged into your account with the login/password. Do you use the same password everywhere?

If you want to get the site back up and running quickly then get your password changed with the host company and just change the index to forward to your forum.

Thanks for the help, pardon my ignorance but how do I check the server logs? I can see RAW access logs in cpanel or HTTP access logs?

[Armageddonz]

You have to contact your host mate.

[Bacon Butty]

Originally Posted by zelnik

Check your server logs to see if it gives any indication of how it was done.

Contact your host to work out if your server was hacked their end or someone has installed a keyboard logger on your machine at home and just logged into your account with the login/password. Do you use the same password everywhere?

If you want to get the site back up and running quickly then get your password changed with the host company and just change the index to forward to your forum.

Thanks. Followed that and its gone, for now....

[iBardia]

I got something like this once.