my forum hacked

[debian1]

hello, my forum vb forumikatolik was hacked since this afternoon, and index page is not started... i can entry on admincp, so i think is just and small error, how can I recover my index page and did the forum works? can anybody help pls?

change your host, change your passwords, that will clean all your problems...

[Jase2]

Go into your FORUMHOME template and revert it to the default.

Also, re-upload all the vB non-image files overwriting any on your server. Then, change all passwords, including FTP ect..

You should be able to get back after reverting FORUMHOME -- but it's best to be safe than sorry.

Ask any admins you have to change their password, too.

Regards Jason

[debian1]

Originally Posted by Jase2

Go into your FORUMHOME template and revert it to the default.

You should be able to get back after reverting FORUMHOME -- but it's best to be safe than sorry.



Regards Jason

I did it, but it's not working still

[lasto]

have they changed index.php on your server ?

[debian1]

Originally Posted by lasto

have they changed index.php on your server ?

i replaced the file index.php but nothing has been changed

[snakes1100]

Do the following looking for iframe code or by word MoHaMeDiTo

Check global.php at the bottom of the file.

If you have vbadvanced, check the vba_cmps_include_template.php file as well

Also search your style for iframe code or the word MoHaMeDiTo

Then change all your passwords for your site, check file permissions on all files make sure they are 644.

If it happens again check all your hacks are up2date

[debian1]

Originally Posted by snakes1100

Do the following looking for iframe code or by word MoHaMeDiTo

Check global.php at the bottom of the file.

If you have vbadvanced, check the vba_cmps_include_template.php file as well

Also search your style for iframe code or the word MoHaMeDiTo

Then change all your passwords for your site, check file permissions on all files make sure they are 644.

If it happens again check all your hacks are up2date

no way, there's no iframe or something word muhamedito on global.php file

[Jase2]

To troubleshoot this, first reupload all the original vB non-image files (except install.php). Make sure you upload these in ASCII format and overwrite the ones on the server. Also be sure to upload the admincp files to whichever directory you have set in your config.php file. Then run 'Suspect File Versions' in Diagnostics to make sure you have all the original files for your version and that none show 'File does not contain expected contents':

Admin CP -> Maintenance -> Diagnostics -> Suspect File Versions

[Note: In some cases you may also need to remove any of the listed .xml files in the includes/xml directory.]

Next, disable all plugins.

Note: To temporarily disable the plugin system, edit config.php and add this line right under <?php

define('DISABLE_HOOKS', true);

Do you have the same problem?

Regards Jason

[debian1]

overwriting all the .php files?