The Arcive of Official vBulletin Modifications Site.It is not a VB3 engine, just a parsed copy! |
|
#1
|
|||
|
|||
my forum got hacked and delete
hello i have a big trouble with my forum.
yesterday i go to internet cafe.and login in to my cpanel forum admincp. and then in the next 5hours im open my site. my forum site room got deleted. many room is deleted and my member get banned too. i take dedicated server for this 309$ / month. i ask to my support host for backup my database. they have my last database at 18 februari 2009 (my site got hacked) and they restore my database.but its not complete because they have my database after hacker deleted my forum. and now they dont have database again. what should i do for this? i make my forum for 1year. and i have 25.000 visitor / day. tq very much. |
#2
|
|||
|
|||
You dont save monthly backups to your hard drive? Dont they have a back up before Feb 18th?
OUCH |
#3
|
|||
|
|||
backup is everyday.but it always replace from before.
that my support host say : Quote:
and now what should i do? |
#4
|
|||
|
|||
Do you have any older backups of your site? If not then you may just have to start again.
|
#5
|
|||
|
|||
no i dont have backup for my site.
because my host say always backup my database everyday. and now they say they backup my database everyday but it will be replace from before. now i really sad. i make money 2000$/month in this site. i cant start my forum again. |
#6
|
|||
|
|||
They make it everyday however the backup from yesterday is after you were hacked so they can't help you with that as they don't keep every backup for your site.
You would have to start again if you don't have any backup unless you can solve it in any way? |
#7
|
|||
|
|||
What is in your DB tables on the back up? Anything? Any info?
Is your forum accessible at all? Can you get into your admin cp? --------------- Added [DATE]1234965282[/DATE] at [TIME]1234965282[/TIME] --------------- Oooh and its just my opinion that they shouldnt BOTH be replaced in one night. JMO |
#8
|
|||
|
|||
You might want to check the server yourself for older backups as well, without a older backup, you CAN'T restore it back to a point before you go hacked, you can only try to repair the damage they did, move the users back to the groups they were in, then secure the site from that point on, the thread/post loss you will not be able to fix either without a backup.
As well, if they are doing backups with cpanel, cpanel backups are dated and shouldn't be over writing each other on a nightly basis. |
#9
|
|||
|
|||
here i check in my adminlog for hacker :
Code:
37681 zHaZha 01:40, 18th Feb 2009 forum.php remove forum id = 252 118.137.3.253 37680 zHaZha 01:40, 18th Feb 2009 forum.php 118.137.3.253 37679 zHaZha 01:39, 18th Feb 2009 forum.php kill forum id = 254 118.137.3.253 37678 zHaZha 01:39, 18th Feb 2009 forum.php remove forum id = 254 118.137.3.253 37677 zHaZha 01:38, 18th Feb 2009 forum.php modify 118.137.3.253 37676 zHaZha 01:38, 18th Feb 2009 forum.php modify 118.137.3.253 37675 zHaZha 01:33, 18th Feb 2009 forum.php remove forum id = 74 118.137.3.253 37674 zHaZha 01:33, 18th Feb 2009 forum.php modify 118.137.3.253 37673 zHaZha 01:32, 18th Feb 2009 options.php options 118.137.3.253 37672 zHaZha 01:31, 18th Feb 2009 forum.php 118.137.3.253 37671 zHaZha 01:31, 18th Feb 2009 announcement.php kill announcement id = 14 118.137.3.253 37670 zHaZha 01:31, 18th Feb 2009 announcement.php remove announcement id = 14 118.137.3.253 37669 zHaZha 01:30, 18th Feb 2009 forum.php modify 118.137.3.253 37668 zHaZha 01:30, 18th Feb 2009 banning.php banuser 118.137.3.253 37696 zHaZha 02:05, 18th Feb 2009 forum.php 118.137.3.253 37695 zHaZha 02:04, 18th Feb 2009 forum.php kill forum id = 200 118.137.3.253 37694 zHaZha 02:04, 18th Feb 2009 forum.php remove forum id = 200 118.137.3.253 37693 zHaZha 02:03, 18th Feb 2009 forum.php 118.137.3.253 37692 zHaZha 02:03, 18th Feb 2009 forum.php kill forum id = 131 118.137.3.253 37691 zHaZha 01:59, 18th Feb 2009 forum.php remove forum id = 131 118.137.3.253 37690 zHaZha 01:59, 18th Feb 2009 forum.php modify 118.137.3.253 37689 zHaZha 01:33, 18th Feb 2009 forum.php kill forum id = 74 118.137.3.253 37688 zHaZha 01:38, 18th Feb 2009 forum.php kill forum id = 74 118.137.3.253 37687 zHaZha 01:47, 18th Feb 2009 forum.php remove forum id = 1 118.137.3.253 37686 zHaZha 01:47, 18th Feb 2009 forum.php 118.137.3.253 37685 zHaZha 01:45, 18th Feb 2009 forum.php kill forum id = 94 118.137.3.253 37684 zHaZha 01:45, 18th Feb 2009 forum.php remove forum id = 94 118.137.3.253 37683 zHaZha 01:41, 18th Feb 2009 forum.php 118.137.3.253 37682 zHaZha 01:40, 18th Feb 2009 forum.php kill forum id = 252 118.137.3.253 37711 zHaZha 02:19, 18th Feb 2009 forum.php remove forum id = 73 118.137.3.253 37710 zHaZha 02:18, 18th Feb 2009 forum.php 118.137.3.253 37709 zHaZha 02:14, 18th Feb 2009 forum.php kill forum id = 1 118.137.3.253 37708 zHaZha 02:12, 18th Feb 2009 forum.php kill forum id = 1 118.137.3.253 37707 zHaZha 01:48, 18th Feb 2009 forum.php kill forum id = 1 118.137.3.253 37706 zHaZha 01:58, 18th Feb 2009 forum.php kill forum id = 1 118.137.3.253 37705 zHaZha 02:14, 18th Feb 2009 forum.php kill forum id = 1 118.137.3.253 37704 zHaZha 02:15, 18th Feb 2009 forum.php kill forum id = 1 118.137.3.253 37703 zHaZha 02:12, 18th Feb 2009 forum.php remove forum id = 1 118.137.3.253 37702 zHaZha 02:12, 18th Feb 2009 forum.php modify 118.137.3.253 37701 zHaZha 02:12, 18th Feb 2009 forum.php 118.137.3.253 37700 zHaZha 02:08, 18th Feb 2009 forum.php kill forum id = 193 118.137.3.253 37699 zHaZha 02:11, 18th Feb 2009 forum.php kill forum id = 193 118.137.3.253 37698 zHaZha 02:11, 18th Feb 2009 forum.php kill forum id = 193 118.137.3.253 37697 zHaZha 02:07, 18th Feb 2009 forum.php remove forum id = 193 118.137.3.253 37726 zHaZha 03:04, 18th Feb 2009 forum.php modify 118.137.3.253 37725 zHaZha 03:04, 18th Feb 2009 forum.php edit forum id = 250 118.137.3.253 37724 zHaZha 03:03, 18th Feb 2009 forum.php modify 118.137.3.253 37723 zHaZha 02:51, 18th Feb 2009 forum.php remove forum id = 73 118.137.3.253 37722 zHaZha 02:48, 18th Feb 2009 forum.php 118.137.3.253 37721 zHaZha 02:43, 18th Feb 2009 forum.php kill forum id = 165 118.137.3.253 37720 zHaZha 02:43, 18th Feb 2009 forum.php kill forum id = 165 118.137.3.253 37719 zHaZha 02:36, 18th Feb 2009 forum.php kill forum id = 165 118.137.3.253 37718 zHaZha 02:38, 18th Feb 2009 forum.php kill forum id = 165 118.137.3.253 37717 zHaZha 02:38, 18th Feb 2009 forum.php kill forum id = 165 118.137.3.253 37716 zHaZha 02:36, 18th Feb 2009 forum.php remove forum id = 165 118.137.3.253 37715 zHaZha 02:34, 18th Feb 2009 forum.php 118.137.3.253 37714 zHaZha 02:31, 18th Feb 2009 forum.php kill forum id = 167 118.137.3.253 37713 zHaZha 02:31, 18th Feb 2009 forum.php remove forum id = 167 118.137.3.253 37712 zHaZha 02:31, 18th Feb 2009 forum.php modify 118.137.3.253 37741 zHaZha 02:53, 18th Feb 2009 forum.php kill forum id = 73 118.137.3.253 37740 zHaZha 02:52, 18th Feb 2009 forum.php kill forum id = 73 118.137.3.253 37739 zHaZha 02:23, 18th Feb 2009 forum.php kill forum id = 73 118.137.3.253 37738 zHaZha 02:53, 18th Feb 2009 forum.php kill forum id = 73 118.137.3.253 37737 zHaZha 02:23, 18th Feb 2009 forum.php kill forum id = 73 118.137.3.253 37736 zHaZha 02:19, 18th Feb 2009 forum.php kill forum id = 73 118.137.3.253 37735 zHaZha 03:28, 18th Feb 2009 forum.php 118.137.3.253 37734 zHaZha 03:27, 18th Feb 2009 forum.php kill forum id = 18 118.137.3.253 37733 zHaZha 03:27, 18th Feb 2009 forum.php remove forum id = 18 118.137.3.253 37732 zHaZha 03:12, 18th Feb 2009 forum.php 118.137.3.253 37731 zHaZha 03:10, 18th Feb 2009 forum.php kill forum id = 149 118.137.3.253 37730 zHaZha 03:06, 18th Feb 2009 forum.php kill forum id = 149 118.137.3.253 37729 zHaZha 03:07, 18th Feb 2009 forum.php kill forum id = 149 118.137.3.253 37728 zHaZha 03:07, 18th Feb 2009 forum.php kill forum id = 149 118.137.3.253 37727 zHaZha 03:06, 18th Feb 2009 forum.php remove forum id = 149 118.137.3.253 37756 zHaZha 04:05, 18th Feb 2009 forum.php 118.137.3.253 37755 zHaZha 04:02, 18th Feb 2009 forum.php kill forum id = 60 118.137.3.253 37754 zHaZha 04:03, 18th Feb 2009 forum.php kill forum id = 60 118.137.3.253 37753 zHaZha 04:05, 18th Feb 2009 forum.php kill forum id = 60 118.137.3.253 37752 zHaZha 04:05, 18th Feb 2009 forum.php kill forum id = 60 118.137.3.253 37751 zHaZha 04:03, 18th Feb 2009 forum.php kill forum id = 60 118.137.3.253 37750 zHaZha 04:02, 18th Feb 2009 forum.php remove forum id = 60 118.137.3.253 37749 zHaZha 04:02, 18th Feb 2009 forum.php 118.137.3.253 37748 zHaZha 04:00, 18th Feb 2009 forum.php kill forum id = 235 118.137.3.253 37747 zHaZha 04:00, 18th Feb 2009 forum.php remove forum id = 235 118.137.3.253 37746 zHaZha 03:56, 18th Feb 2009 forum.php 118.137.3.253 37745 zHaZha 03:56, 18th Feb 2009 forum.php kill forum id = 248 118.137.3.253 37744 zHaZha 03:56, 18th Feb 2009 forum.php remove forum id = 248 118.137.3.253 37743 zHaZha 03:56, 18th Feb 2009 forum.php modify 118.137.3.253 37742 zHaZha 03:55, 18th Feb 2009 forum.php remove forum id = 250 118.137.3.253 37771 zHaZha 04:13, 18th Feb 2009 forum.php 118.137.3.253 37770 zHaZha 04:12, 18th Feb 2009 forum.php kill forum id = 84 118.137.3.253 37769 zHaZha 04:12, 18th Feb 2009 forum.php remove forum id = 84 118.137.3.253 37768 zHaZha 04:12, 18th Feb 2009 forum.php 118.137.3.253 37767 zHaZha 04:12, 18th Feb 2009 forum.php kill forum id = 107 118.137.3.253 37766 zHaZha 04:12, 18th Feb 2009 forum.php remove forum id = 107 118.137.3.253 37765 zHaZha 04:10, 18th Feb 2009 forum.php 118.137.3.253 37764 zHaZha 04:10, 18th Feb 2009 forum.php kill forum id = 243 118.137.3.253 37763 zHaZha 04:10, 18th Feb 2009 forum.php remove forum id = 243 118.137.3.253 37762 zHaZha 04:09, 18th Feb 2009 forum.php modify 118.137.3.253 37761 zHaZha 04:07, 18th Feb 2009 usergroup.php modify 118.137.3.253 37760 zHaZha 04:07, 18th Feb 2009 usergroup.php update usergroup id = 5 118.137.3.253 37759 zHaZha 04:06, 18th Feb 2009 usergroup.php edit usergroup id = 5 118.137.3.253 37758 zHaZha 04:06, 18th Feb 2009 usergroup.php modify 118.137.3.253 37757 zHaZha 04:05, 18th Feb 2009 subscriptions.php modify 118.137.3.253 37786 zHaZha 10:24, 18th Feb 2009 user.php find 118.137.3.253 37785 zHaZha 10:24, 18th Feb 2009 user.php find 118.137.3.253 37784 zHaZha 10:24, 18th Feb 2009 user.php modify 118.137.3.253 37783 zHaZha 10:23, 18th Feb 2009 email.php genlist 118.137.3.253 37782 zHaZha 10:23, 18th Feb 2009 user.php changehistory user id = 3 118.137.3.253 37781 zHaZha 10:22, 18th Feb 2009 user.php edit user id = 3 118.137.3.253 37780 zHaZha 10:22, 18th Feb 2009 usertools.php pmfolderstats user id = 3 118.137.3.253 37779 zHaZha 10:21, 18th Feb 2009 user.php changehistory user id = 3 118.137.3.253 37778 zHaZha 10:21, 18th Feb 2009 user.php edit user id = 3 118.137.3.253 37777 zHaZha 10:21, 18th Feb 2009 user.php pruneusers 118.137.3.253 37776 zHaZha 10:20, 18th Feb 2009 user.php prune 118.137.3.253 37775 zHaZha 10:13, 18th Feb 2009 banning.php 118.137.3.253 37774 zHaZha 10:12, 18th Feb 2009 banning.php dobanuser username = davina 118.137.3.253 37773 zHaZha 10:12, 18th Feb 2009 banning.php banuser 118.137.3.253 37772 zHaZha 10:12, 18th Feb 2009 user.php modify 118.137.3.253 37801 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37800 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37799 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37798 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37797 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37796 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37795 zHaZha 10:29, 18th Feb 2009 user.php dopruneusers 118.137.3.253 37794 zHaZha 10:28, 18th Feb 2009 user.php pruneusers 118.137.3.253 37793 zHaZha 10:27, 18th Feb 2009 user.php prune 118.137.3.253 37792 zHaZha 10:27, 18th Feb 2009 banning.php banuser 118.137.3.253 37791 zHaZha 10:27, 18th Feb 2009 usertools.php merge 118.137.3.253 37790 zHaZha 10:25, 18th Feb 2009 usertools.php pmuserstats 118.137.3.253 37789 zHaZha 10:25, 18th Feb 2009 usertools.php pmstats 118.137.3.253 37788 zHaZha 10:25, 18th Feb 2009 passwordcheck.php check 118.137.3.253 37787 zHaZha 10:25, 18th Feb 2009 passwordcheck.php 118.137.3.253 37816 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37815 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37814 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37813 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37812 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37811 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37810 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37809 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37808 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37807 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37806 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37805 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37804 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37803 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37802 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37831 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37830 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37829 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37828 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37827 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37826 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37825 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37824 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37823 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37822 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37821 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37820 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37819 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37818 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37817 zHaZha 10:29, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37846 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37845 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37844 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37843 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37842 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37841 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37840 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37839 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37838 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37837 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37836 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37835 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37834 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37833 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37832 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37861 zHaZha 10:35, 18th Feb 2009 help.php answer 118.137.3.253 37860 zHaZha 10:34, 18th Feb 2009 user.php edit user id = 64606 118.137.3.253 37859 zHaZha 10:34, 18th Feb 2009 user.php find 118.137.3.253 37858 zHaZha 10:34, 18th Feb 2009 user.php modify 118.137.3.253 37857 zHaZha 10:34, 18th Feb 2009 help.php answer 118.137.3.253 37856 zHaZha 10:33, 18th Feb 2009 usertools.php pmfolderstats user id = 64606 118.137.3.253 37855 zHaZha 10:33, 18th Feb 2009 user.php edit user id = 64606 118.137.3.253 37854 zHaZha 10:32, 18th Feb 2009 user.php find 118.137.3.253 37853 zHaZha 10:32, 18th Feb 2009 user.php modify 118.137.3.253 37852 zHaZha 10:31, 18th Feb 2009 accessmask.php modify 118.137.3.253 37851 zHaZha 10:31, 18th Feb 2009 user.php prune 118.137.3.253 37850 zHaZha 10:30, 18th Feb 2009 user.php prune 118.137.3.253 37849 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37848 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37847 zHaZha 10:30, 18th Feb 2009 user.php prune_updateposts 118.137.3.253 37876 zHaZha 10:42, 18th Feb 2009 banning.php doliftban username = Davina 118.137.3.253 37875 zHaZha 10:42, 18th Feb 2009 banning.php liftban 118.137.3.253 37874 zHaZha 10:42, 18th Feb 2009 banning.php modify 118.137.3.253 37873 zHaZha 10:41, 18th Feb 2009 banning.php banuser 118.137.3.253 37872 zHaZha 10:41, 18th Feb 2009 user.php edit user id = 64606 118.137.3.253 37871 zHaZha 10:41, 18th Feb 2009 user.php find 118.137.3.253 37870 zHaZha 10:41, 18th Feb 2009 user.php modify 118.137.3.253 37869 zHaZha 10:36, 18th Feb 2009 user.php modify user id = 64606 118.137.3.253 37868 zHaZha 10:36, 18th Feb 2009 user.php update user id = 64606 118.137.3.253 37867 zHaZha 10:35, 18th Feb 2009 user.php edit user id = 64606 118.137.3.253 37866 zHaZha 10:35, 18th Feb 2009 banning.php 118.137.3.253 37865 zHaZha 10:35, 18th Feb 2009 banning.php dobanuser username = davina 118.137.3.253 37864 zHaZha 10:35, 18th Feb 2009 banning.php banuser 118.137.3.253 37863 zHaZha 10:35, 18th Feb 2009 user.php modify user id = 64606 118.137.3.253 37862 zHaZha 10:35, 18th Feb 2009 user.php update user id = 64606 118.137.3.253 37891 zHaZha 17:19, 18th Feb 2009 options.php options 222.124.201.178 37890 zHaZha 17:19, 18th Feb 2009 options.php 222.124.201.178 37889 zHaZha 17:19, 18th Feb 2009 forum.php modify 222.124.201.178 37888 zHaZha 17:19, 18th Feb 2009 options.php options 222.124.201.178 37887 zHaZha 17:19, 18th Feb 2009 options.php 222.124.201.178 hacker delete forum one by one. they just deleted via admincp. not login in my cpanel host. now what should i do? i dont have backup database for my forum site. |
#10
|
|||
|
|||
Numerous ppl have already told you what to do.
|
|
|
X vBulletin 3.8.12 by vBS Debug Information | |
---|---|
|
|
More Information | |
Template Usage:
Phrase Groups Available:
|
Included Files:
Hooks Called:
|