Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions

Reply
 
Thread Tools Display Modes
  #1  
Old 09-07-2010, 03:24 PM
silentranks silentranks is offline
 
Join Date: Apr 2010
Posts: 16
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default hacked?

ummm, I know this site is more active than vbulletin.com so i thought i'd give it a try here. can someone check out my site? the front page says it was hacked. I know I paid someone on here to add it a few months back, but I dont think it has anything to do with it. I dont have the money to pay someone to fix it, but if any help would be great..! its not the forum, its the front page. this is what a member wrote..

Quote:
Hello Ladies,

I sent a message to the g-mail and Kim about this. I understand Kim is no longer here, but I think that this is something that you need to know. Kim told me that someone else told her this was happening on her FB. She didn't tell me who it was, though. I figured out that I can get on using /forum/ but I am getting a hacked message when I try to get on using www..com.

Here is the issue:

When I try to get on I get: "This "website" has been hacked." It had the word "Islam" and "From: Turkey". Elyon...!!!" The address bar also changes to "Elyon...!!!" There is also a picture of a hooded figure and the devil on it. There were some words I couldn't read, and I think they are in Turkish.

When I run my Spyware Software after trying to log-in, it says that I have an ISTBar. I looked it up and got this:

"ISTBar (MSUpdates\MSCache; SearchBarCash; TinyBar; ISTBar/AUpdat; and variants, including ISTBar/MSCache and ISTBar/XXXToolbar) is a browser hijacker that reconfigures the start page, toolbars, and search page in IE. It also delivers pop-up ads and, in some variants, will present porn in the form of pop-up windows on your Desktop. ISTBar has been known to carry other spyware into your system, as well." http://www.pctoday.com/editorial/art...id=25535&guid=

I am concerned about this and thought that you would want to let the other members know, perhaps in a PM if the site is really being hacked. Also, it is probably a good idea to let v-bullentin know. It's very creepy, and this being a military related site might be the reason for it.

Sorry, not trying to sound paranoid, but since it happened on two different computers, with two different ip addresses and networks (not counting whoever reported it to Kim on FB) I think that it's worth you all looking into. Also, I am having no other problems using the internet.

Ally
Reply With Quote
  #2  
Old 09-07-2010, 03:29 PM
KevinL KevinL is offline
 
Join Date: Apr 2005
Posts: 1,287
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Maybe a link to your site would help people help you?
Reply With Quote
  #3  
Old 09-07-2010, 03:33 PM
borbole's Avatar
borbole borbole is offline
 
Join Date: Jan 2010
Posts: 2,559
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Indeed. A link would help a lot. But failed that, can you tell us what version of vb do you have? Can you also post a screenshot of your hacked front page?
Reply With Quote
  #4  
Old 09-07-2010, 03:39 PM
silentranks silentranks is offline
 
Join Date: Apr 2010
Posts: 16
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

sorry, wasnt sure if i could post it..

www.the-silent-rank.com

the forum is working fine its where vbadvanced is supposed to be.. i paid someone on here to add it but that was back in april. This just happened this last few days!! So I thought Id post here
Reply With Quote
  #5  
Old 09-07-2010, 03:50 PM
borbole's Avatar
borbole borbole is offline
 
Join Date: Jan 2010
Posts: 2,559
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by silentranks View Post
sorry, wasnt sure if i could post it..

www.the-silent-rank.com

the forum is working fine its where vbadvanced is supposed to be.. i paid someone on here to add it but that was back in april. This just happened this last few days!! So I thought Id post here
Overwite the hacked index file with a fresh vbadvanced index file. But seeing that it is the vbadvanced that got hacked and not the forum, I think you should post this at their forum.
Reply With Quote
  #6  
Old 09-07-2010, 03:53 PM
silentranks silentranks is offline
 
Join Date: Apr 2010
Posts: 16
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

ahhh okay, I just dont recall their site and I paid someone on here. but that works for me ill google em. thanks so much
Reply With Quote
  #7  
Old 09-07-2010, 04:37 PM
borbole's Avatar
borbole borbole is offline
 
Join Date: Jan 2010
Posts: 2,559
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by silentranks View Post
ahhh okay, I just dont recall their site and I paid someone on here. but that works for me ill google em. thanks so much
You can find their forum here

http://www.vbadvanced.com/

What version of vbadvanced were you using? I suggested to ask at their forum as there you might recieve better and faster help.
Reply With Quote
  #8  
Old 09-07-2010, 05:35 PM
AdrianH AdrianH is offline
 
Join Date: Sep 2007
Posts: 222
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by borbole View Post
Overwite the hacked index file with a fresh vbadvanced index file. But seeing that it is the vbadvanced that got hacked and not the forum, I think you should post this at their forum.

So just exactly how did you come up with the idea that the CMPS had been hacked and not the forum?
Reply With Quote
  #9  
Old 09-07-2010, 06:47 PM
borbole's Avatar
borbole borbole is offline
 
Join Date: Jan 2010
Posts: 2,559
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by CareyCrew View Post
So just exactly how did you come up with the idea that the CMPS had been hacked and not the forum?
According to the OP only his front page was hacked, the forum works fine.
Reply With Quote
  #10  
Old 09-07-2010, 07:18 PM
AdrianH AdrianH is offline
 
Join Date: Sep 2007
Posts: 222
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

To replace the homepage requires them to alter the index.php file, access to the server would be required.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 06:46 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04018 seconds
  • Memory Usage 2,244KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (5)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete