CSS all screwball after hack

[EliasAlucard]

Just got hacked after several months of peace. The hacker doesn't seem to have done much harm, but he did screw up the forum skins' CSS, all skins now look like someone has installed a vBulletin 3 skin on vB4. Any way to repair the skins?

[TheLastSuperman]

Try this mod - https://vborg.vbsupport.ru/showthread.php?t=281080

You can also try uploading tools.php to have it basically reimport the style and settings either *should* work.

[EliasAlucard]

Originally Posted by TheLastSuperman

Try this mod - https://vborg.vbsupport.ru/showthread.php?t=281080

Just tried it, didn't work. Is it supposed to do something other than rebuild styles?

[tbworld]

Originally Posted by EliasAlucard

Just tried it, didn't work. Is it supposed to do something other than rebuild styles?

If you read the thread of the modification, @Zachery explains exactly what it does and does not do.

[hterrag]

How did the hacker hack your forum?

[EliasAlucard]

Somehow the hacker messed with the following plugins:

https://vborg.vbsupport.ru/showthread.php?t=234043
https://vborg.vbsupport.ru/showthread.php?t=236480
https://vborg.vbsupport.ru/showthread.php?t=299371

When enabled, all forum skins' CSS turn out completely messed up. I've tried uninstalling and reinstalling these plugins, but that doesn't make a difference.

[tbworld]

The following guides and best practices should get you up and running again. Be thorough when using them, and sorry you were hacked.

Then please read the following two blog posts:
http://www.vbulletin.com/forum/blogs...ve-been-hacked
http://www.vbulletin.com/forum/blogs...vbulletin-site

Also please see these recent security announcements:
http://www.vbulletin.com/forum/forum...-1-vbulletin-5
http://www.vbulletin.com/forum/forum...d-all-versions

[EliasAlucard]

Originally Posted by hterrag

How did the hacker hack your forum?

Injections through attachments.

Originally Posted by tbworld

The following guides and best practices should get you up and running again. Be thorough when using them, and sorry you were hacked.

Then please read the following two blog posts:
http://www.vbulletin.com/forum/blogs...ve-been-hacked
http://www.vbulletin.com/forum/blogs...vbulletin-site

Also please see these recent security announcements:
http://www.vbulletin.com/forum/forum...-1-vbulletin-5
http://www.vbulletin.com/forum/forum...d-all-versions

Thanks, but forum is already secured, up and running now. Attachments folder is completely gone. But now I have to figure out what he screwed up so that these plugins screw up the skins when enabled.