Vbulleting forum hacked - Please help

[skyyjet]

Hi

Recently my vbulletin was hacked.
The hacker encoded his code in all template files and also changed admin password.

Admin area login page after deleting encoded hackers code from templates is displaying blank page.

I uploaded default style using tools.php but site is not opening.

I believe I need to set it a new default style through phpmyadmin as I cannot access admin area of vbulletin.

So I need to know 2 things:

1 - How can we upload styles using phpmyadmin
2 - How to set any existing style or the default vbulletin style as default/main working style through phpmyadmin.

I believe doing this might help to access admin area.

Thanks
Skyjet

[ChopSuey]

You don't have a backup of your db before the hacker got in?

[skyyjet]

No..I know that is my mistake.. I have learnt a lesson

[ChopSuey]

But when you access your admincp...the forums chosen default skin doesn't show up there.

It gives you just a login box. O_o

[skyyjet]

http://www.site.com/forum/admincp/ is there.. But when I click submit it takes to blank page..

Also http://www.site.com/forum/ shows blank page

I believe I need to set default skin to make them visible as hacker messed with the themes.

This is why I want to know how to set default skin through phpmyadmin.

[eSekar]

I don't think that's you're problem, why don't you just re-upload your forum files ?

or at least start by uploading a fresh /admincp/ folder, that should get your ACP issue fixed at least, & from there you'll see what your problem really is.

[skyyjet]

Originally Posted by eSekar

I don't think that's you're problem, why don't you just re-upload your forum files ?

or at least start by uploading a fresh /admincp/ folder, that should get your ACP issue fixed at least, & from there you'll see what your problem really is.

Already uploaded admincp.. It didn't worked.. BTW hacker was unable to modify vbullein files..he only made changes in database..ie in vbulletin styles..

[A.Chakery]

Originally Posted by skyyjet

Already uploaded admincp.. It didn't worked.. BTW hacker was unable to modify vbullein files..he only made changes in database..ie in vbulletin styles..

Hi,
I faced this kind of hacking once , try to correct or re-install the default skin.

I hope it can help you
good luck

[ChopSuey]

Originally Posted by UIQarena

Hi,
I faced this kind of hacking once , try to correct or re-install the default skin.

I hope it can help you
good luck

Lol he's asking how to do it!

Have you checked your db for unwanted tables and other things?

[eSekar]

Well mate if he had access to your database I'm sure he did more than changing your style.

I dunno but if it was me I'll try a million thing til you get it right, at least you should know whats wrong then find a solution.

try changing the admincp name to something else, like admincppp then try to access it, don't forget to change the name in your config.php

and can you reach any other page on your site? like showthread.php?19... or search.php

is it the index / admincp pages only or the whole site.

if the above didn't work I think your best option is to check your Database and see if it's messed up (try ask you host if they have a backup, most hosting co's does a backup weekly for users)