Site hacked

[Big Country]

TONS of SPAM, 1000's of blog entries, and the freaky thing is there is a "new administrator".
"aku" no IP addy, nothing, I have no idea HOW it got there.
anyways. deleted some users and I noticed that I was NOT able to delete one user, no matter how many times I tried, the user would still be there.
using Spam-O-Matic,, guess that has been defeated given the number of new users.

questions, HOW do I mass delete blogs?

I shut down the site and some of these spammers are STILL posting blogs while the site is down .

help WOULD be appreciated. thanks.

[ozzy47]

Please read the following two blog posts:
http://www.vbulletin.com/forum/blogs...ve-been-hacked
http://www.vbulletin.com/forum/blogs...vbulletin-site
Also please see these recent security announcements:
vBulletin 4.1.x-4.2.x & All versions of vBulletin 5: http://www.vbulletin.com/forum/forum...-1-vbulletin-5
vBulletin 5.0.x patch released, for a different security issue: http://www.vbulletin.com/forum/forum...d-all-versions

[Big Country]

Originally Posted by ozzy47

Please read the following two blog posts:
http://www.vbulletin.com/forum/blogs...ve-been-hacked
http://www.vbulletin.com/forum/blogs...vbulletin-site
Also please see these recent security announcements:
vBulletin 4.1.x-4.2.x & All versions of vBulletin 5: http://www.vbulletin.com/forum/forum...-1-vbulletin-5
vBulletin 5.0.x patch released, for a different security issue: http://www.vbulletin.com/forum/forum...d-all-versions

thank you, still fishing for a way to kill all the blogs.

[ozzy47]

I would start by securing the site first, then repair the damage.

[ForceHSS]

Check in plugin manager hackers add there own sometimes so if removed then can make more accounts.

[Big Country]

thanks guys, working on it, guess Ill be down for a few days while I tackle things.

[ozzy47]

Yeah unfortunately these things tend to happen sometimes, just make sure you follow everything thoroughly, or you will have more problems.

[New Joe]

Do you have a back up of the data base before the hack?
maybe that could help if you did.

[Big Country]

sadly I do not have recent back ups.

getting errors when prunning/deleting some users

Deleting User JesseLowe
Fatal error: Call to a member function query_read() on a non-object in /home1/*/***/public_html/includes/class_dm_blog_user.php on line 218

[tbworld]

Most good hosting services retain a backup for their own purpose. There is usually a fee involved for retrieving your database/files from their backup system, unless it is included in your host service pack. Depending on the size of your board this might be an option for you.