Announcement

Collapse
No announcement yet.

hacked ? help plz...

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • hacked ? help plz...

    oi,

    i think my forum has been hacked tried the tools.php but it also seems that the userbase is empty when i try to create a new user i'm being rejected due to spammer policy (had this happen before when some creep put my name and ip in a spam list)

    latest backup is about 3-4 weeks old i think..

    what to do next....?

    (and how to put the backup back when i don't have admin access, this may all be discussed... and i will search but it's just that this is kinda overwhelming)
    rb~
    http://images.macrumors.com/vb/image...blackapple.gif iPhone 3G[S] - iOS4 - 16gb [ http://totalsmartphone.net ]

  • #2
    can NOT create new users either... what now ?
    rb~
    http://images.macrumors.com/vb/image...blackapple.gif iPhone 3G[S] - iOS4 - 16gb [ http://totalsmartphone.net ]

    Comment


    • #3
      Have you tried running an anti-virus to check if your computer has been infected?

      Comment


      • #4
        If you can't create a new user or use tools.php, there isn't much we can do to help you in the support forums. You would need to open a support ticket with full access (Admin CP, FTP, Database) to your site.
        Translations provided by Google.

        Wayne Luke
        The Rabid Badger - a vBulletin Cloud demonstration site.
        vBulletin 5 API

        Comment


        • #5
          thanks Wayne, problem is who ever hacked me 1. put my ip in StopForumSpam list (requested a removal, this was the 2nd time some jerk/jerkette) put me in it. secondly.. had a member try creating an account and she could not either, so i'm kinda at a loss how to regain access/control.
          rb~
          http://images.macrumors.com/vb/image...blackapple.gif iPhone 3G[S] - iOS4 - 16gb [ http://totalsmartphone.net ]

          Comment


          • #6
            Disable your plugins. To temporarily disable the plugin system, edit config.php and add this line right under <?php

            define('DISABLE_HOOKS', true);
            Translations provided by Google.

            Wayne Luke
            The Rabid Badger - a vBulletin Cloud demonstration site.
            vBulletin 5 API

            Comment


            • #7
              Originally posted by Wayne Luke View Post
              Disable your plugins. To temporarily disable the plugin system, edit config.php and add this line right under <?php

              define('DISABLE_HOOKS', true);
              thanks again Wayne, i can get in again... ALL threads were removed (short of a recent backup any way of getting those back, they were deleted from the ACP) i have a backup from 6/18/09..
              rb~
              http://images.macrumors.com/vb/image...blackapple.gif iPhone 3G[S] - iOS4 - 16gb [ http://totalsmartphone.net ]

              Comment


              • #8
                nowhere in the moderator log can i find where user accounts were delete... just that threads are removed.
                rb~
                http://images.macrumors.com/vb/image...blackapple.gif iPhone 3G[S] - iOS4 - 16gb [ http://totalsmartphone.net ]

                Comment


                • #9
                  so even if i still see ALL the threads in the mod log, there's no way to retrieve them ?

                  secondly, how do i restore the backup i have ?

                  amazed how little the support is
                  rb~
                  http://images.macrumors.com/vb/image...blackapple.gif iPhone 3G[S] - iOS4 - 16gb [ http://totalsmartphone.net ]

                  Comment


                  • #10
                    If the threads and posts are removed from the database then they are gone. The only option is to restore a backup.

                    The only reliable method of restoring a database is with shell access via telnet or ssh. This is because restoring with a PHP script like that in phpMyAdmin can result in PHP timeout errors and an incomplete database. Please see the instructions here:

                    http://www.vbulletin.com/docs/html/m...ce_ssh_restore

                    Note: Some people have reported success with these scripts:

                    MySQLDumper:
                    http://www.mysqldumper.de/en/index.php

                    MySQLHotxcopy:
                    http://www.vbulletin.com/forum/showt...t=mysqlhotcopy

                    Bigdump (restore only):
                    http://www.ozerov.de/bigdump.php
                    Steve Machol, former vBulletin Customer Support Manager (and NOT retired!)
                    Change CKEditor Colors to Match Style (for 4.1.4 and above)

                    Steve Machol Photography


                    Mankind is the only creature smart enough to know its own history, and dumb enough to ignore it.


                    Comment


                    • #11
                      If the threads were permanently deleted, you would need to restore a backup. Have you verified that user accounts were deleted or were they simply inaccessible due to the addon linking you to StopForumSpam?
                      Translations provided by Google.

                      Wayne Luke
                      The Rabid Badger - a vBulletin Cloud demonstration site.
                      vBulletin 5 API

                      Comment


                      • #12
                        should i be able to restore a backup not made with MySQLDumper ?

                        added: think i found it. just need to upload my backup file..
                        Last edited by rrudeboy; Fri 10 Jul '09, 10:57am.
                        rb~
                        http://images.macrumors.com/vb/image...blackapple.gif iPhone 3G[S] - iOS4 - 16gb [ http://totalsmartphone.net ]

                        Comment


                        • #13
                          so far unable to restore with MySQLDumper, tons on errors *sigh* next question, can i open the forum and restore later without problems ? will the posts posted from now till then stay ?
                          rb~
                          http://images.macrumors.com/vb/image...blackapple.gif iPhone 3G[S] - iOS4 - 16gb [ http://totalsmartphone.net ]

                          Comment


                          • #14
                            How was the backup made and what are the errors?
                            Steve Machol, former vBulletin Customer Support Manager (and NOT retired!)
                            Change CKEditor Colors to Match Style (for 4.1.4 and above)

                            Steve Machol Photography


                            Mankind is the only creature smart enough to know its own history, and dumb enough to ignore it.


                            Comment


                            • #15
                              Originally posted by Steve Machol View Post
                              How was the backup made and what are the errors?
                              backup was made with vBulletin itself.
                              errors:

                              Warning: main(./language//lang.php) [function.main]: failed to open stream: No such file or directory in /hsphere/not_for_your_eyes/restore.php on line 68

                              Warning: main(./language//lang.php) [function.main]: failed to open stream: No such file or directory in /hsphere/not_for_your_eyes/restore.php on line 68

                              Warning: main() [function.include]: Failed opening './language//lang.php' for inclusion (include_path='.:/usr/local/lib/php:/usr/local/lib/php/PEAR:/usr/local/share/pear') in /hsphere/not_for_your_eyes/restore.php on line 68

                              Warning: main(./language//lang_restore.php) [function.main]: failed to open stream: No such file or directory in /hsphere/not_for_your_eyes/restore.php on line 69

                              Warning: main(./language//lang_restore.php) [function.main]: failed to open stream: No such file or directory in /hsphere/not_for_your_eyes/restore.php on line 69

                              Warning: main() [function.include]: Failed opening './language//lang_restore.php' for inclusion (include_path='.:/usr/local/lib/php:/usr/local/lib/php/PEAR:/usr/local/share/pear') in /hsphere/not_for_your_eyes/restore.php on line 69

                              Warning: Cannot modify header information - headers already sent by (output started at /hsphere/not_for_your_eyes/restore.php:68) in /hsphere/not_for_your_eyes/inc/functions_global.php on line 745

                              Warning: Cannot modify header information - headers already sent by (output started at /hsphere/not_for_your_eyes/restore.php:68) in /hsphere/not_for_your_eyes/inc/functions_global.php on line 746

                              Warning: Cannot modify header information - headers already sent by (output started at /hsphere/not_for_your_eyes/restore.php:68) in /hsphere/not_for_your_eyes/inc/functions_global.php on line 747

                              Warning: Cannot modify header information - headers already sent by (output started at /hsphere/not_for_your_eyes/restore.php:68) in /hsphere/not_for_your_eyes/inc/functions_global.php on line 749

                              Warning: mysql_connect() [function.mysql-connect]: Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2) in /hsphere/not_for_your_eyes/inc/mysql.php on line 251
                              MySQL-ERROR
                              Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
                              (paths were edited before posting)
                              rb~
                              http://images.macrumors.com/vb/image...blackapple.gif iPhone 3G[S] - iOS4 - 16gb [ http://totalsmartphone.net ]

                              Comment

                              widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
                              Working...
                              X