Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #11  
Old 02-21-2008, 05:12 PM
uktotty.co.uk uktotty.co.uk is offline
 
Join Date: Jan 2006
Posts: 6
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Hi Lynne I have done a full back up and restore but the site is still hacked after you login or click any links.
is it worth going to an earlier backup or is the redirection actually sitting in the file system?
Reply With Quote
  #12  
Old 02-21-2008, 05:25 PM
Princeton's Avatar
Princeton Princeton is offline
 
Join Date: Nov 2001
Location: Vineland, NJ
Posts: 6,693
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

ask your host to restore a backup if possible (before the hack occurred)

disable all products/plugins once you log in
Reply With Quote
  #13  
Old 02-21-2008, 05:36 PM
Lynne's Avatar
Lynne Lynne is offline
 
Join Date: Sep 2004
Location: California/Idaho
Posts: 41,180
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by uktotty.co.uk View Post
Hi Lynne I have done a full back up and restore but the site is still hacked after you login or click any links.
is it worth going to an earlier backup or is the redirection actually sitting in the file system?
I would replace the files also. But also look for any suspicious files in your system (you can do that in Admin CP > Maintenance ).
Reply With Quote
  #14  
Old 02-22-2008, 07:22 AM
Marco van Herwaarden Marco van Herwaarden is offline
 
Join Date: Jul 2004
Posts: 25,415
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

sorry if this is a stupid question: When did you create that backup, before or after the site was hacked?
Reply With Quote
  #15  
Old 02-22-2008, 10:58 AM
snakes1100 snakes1100 is offline
 
Join Date: Dec 2001
Location: Michigan
Posts: 3,733
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

did you even revert your templates?
Reply With Quote
  #16  
Old 02-28-2008, 08:04 PM
uktotty.co.uk uktotty.co.uk is offline
 
Join Date: Jan 2006
Posts: 6
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Marco van Herwaarden View Post
sorry if this is a stupid question: When did you create that backup, before or after the site was hacked?
Backup was done by cpanel automatically, daily, weekly and monthly, I did the weekly restore within 7 days of the hack.

Thanks for the offers of help on this from everyone, we will be sorting it out soon.
Reply With Quote
  #17  
Old 02-29-2008, 06:10 AM
geniusjones geniusjones is offline
 
Join Date: Feb 2008
Posts: 19
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I like to gather the hacked files together, tarball them and send them to the host just so they have a record that it wasn't me that sent out those 10,000,000 emails haha. Anyway if you keep regular backups you only lose as many days of posts as your backup period is long, so it's usually not bad. My only worry ever when someone gets in is that they'll propagate something malicious that I might get in trouble for.
Reply With Quote
  #18  
Old 01-11-2009, 10:23 PM
ArcadeKing ArcadeKing is offline
 
Join Date: Sep 2008
Posts: 12
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

hi there, we got our websites hacked yeaterday, can anyone help us to fix the problem, i have done back up before we got hacked, but no ideas what to do next, we will be very grateful for any help

thanks
Reply With Quote
  #19  
Old 01-11-2009, 10:45 PM
Shaheen's Avatar
Shaheen Shaheen is offline
 
Join Date: Nov 2006
Location: Melbourne
Posts: 147
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by ArcadeKing View Post
hi there, we got our websites hacked yeaterday, can anyone help us to fix the problem, i have done back up before we got hacked, but no ideas what to do next, we will be very grateful for any help

thanks
ahhh,

i got hacked twice couple of days ago by different hackers....after getting hacked second time what i did...was

as i have regular backup of my forum
i restored all backup from cpanel
and then i disabled all hooks
and then upgraded my forum to latest version of vb
and also i used a web scanner to find out the vulnerables and suspicious files.
Reply With Quote
  #20  
Old 01-11-2009, 11:03 PM
ArcadeKing ArcadeKing is offline
 
Join Date: Sep 2008
Posts: 12
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Shaheen View Post
ahhh,

i got hacked twice couple of days ago by different hackers....after getting hacked second time what i did...was

as i have regular backup of my forum
i restored all backup from cpanel
and then i disabled all hooks
and then upgraded my forum to latest version of vb
and also i used a web scanner to find out the vulnerables and suspicious files.
can you explain how to do that, as we can,t in to do all things you done

thanks
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 06:23 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04795 seconds
  • Memory Usage 2,245KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (4)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete