Announcement

Collapse
No announcement yet.

Site hacked, can someone please help?

Collapse
This topic is closed.
X
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • jaycob
    replied
    Originally posted by forex4noobs View Post
    How does one do this? After this is fixed I am moving to bbpress, tired of vbulletin and it's constant ****.
    its not vbulletin software, its the 3rd party addons, which basically its install at own risk.

    Leave a comment:


  • forex4noobs
    replied
    Originally posted by cataclyzmic View Post
    I think all mentions of %animus% needs to be removed from the database.
    How does one do this? After this is fixed I am moving to bbpress, tired of vbulletin and it's constant ****.

    Leave a comment:


  • cataclyzmic
    replied
    I think all mentions of %animus% needs to be removed from the database.

    Leave a comment:


  • moneymaker
    replied
    I found these if anyone cares to push forward with legal action.

    [email protected]
    [email protected]
    [email protected]
    178.95.169.228
    212.33.216.225
    24.22.146.238

    Leave a comment:


  • forex4noobs
    replied
    Time for my questions

    1. How do I fix user titles? They have all been changes to 'hacked by team animus'?
    2. What exactly has been compromised here? Do I need to change all passwords?

    Leave a comment:


  • forex4noobs
    replied
    Originally posted by Umbrae View Post
    Can you please explain how you did that? I'm trying to disable to addon, but I cannot access AdminCP. It keeps redirecting it to the same page after I login.
    1. Download the latest version of vbulletin.
    2. In the zip go to the do_not_upload file and extract tools.php
    3. Put tools.php it in your vb install folder via ftp.
    4. Visit it in a browser.
    5. You need to use the following options

    [Reset Cookie Domain]
    [Reset Cookie Path]

    [Reset Admin Access]

    6. Delete tools.php from the install directory.
    7. Log in and disable all plugins quickly.

    I do not know how to disable plugins first but I doubt the hackers are sitting on your server ready to hack again as soon as you fix it.

    Leave a comment:


  • cmfinc
    replied
    Originally posted by Umbrae View Post
    Can you please explain how you did that? I'm trying to disable to addon, but I cannot access AdminCP. It keeps redirecting it to the same page after I login.
    id like to know as well. im trying to run day back up to see if it gets me back in but????

    Leave a comment:


  • Umbrae
    replied
    Originally posted by acwatts View Post
    I have gained access to my forums again but I disabled all addons first via config then changed the main admin account using tools.
    Can you please explain how you did that? I'm trying to disable to addon, but I cannot access AdminCP. It keeps redirecting it to the same page after I login.

    Leave a comment:


  • 45Wheelgun
    replied
    Originally posted by rjhollan View Post
    Okay, guess I'll leave it disabled until this all blows over.
    Does anyone know if disabling is "good enough"? I would prefer to disable, but want to make sure I don't need to uninstall.

    I already updated to the "fixed" version, and then I disabled it. Should I remove it completely?
    Last edited by 45Wheelgun; Wed 4 May '11, 5:39pm.

    Leave a comment:


  • Herzog
    replied
    We got hacked too. Adv Forum Rules installed. Pretty sure that's the problem... but we are grepping our log files to find out for sure. So far not much of a footprint.

    Leave a comment:


  • ctrlbrk
    replied
    Does anyone have IP addresses yet of where the attack is coming from?

    Leave a comment:


  • Alfa1
    replied
    I wonder if anyone got hacked that does not have 'advanced forum rules' installed?

    Leave a comment:


  • rjhollan
    replied
    Okay, guess I'll leave it disabled until this all blows over.

    Leave a comment:


  • Alfa1
    replied
    Originally posted by rjhollan View Post
    Does this effect the VSA Advanced Forum rules as well? We were running v5.0.1 (here) but weren't hacked...
    Yes, CYB = VSA

    Leave a comment:


  • rjhollan
    replied
    Does this effect the VSA Advanced Forum rules as well? We were running v5.0.1 (here) but weren't hacked...

    Leave a comment:

Related Topics

Collapse

  • TsG XxGHOSTxX
    I need help
    by TsG XxGHOSTxX
    I just signed up for vbulletin. It is used in a lot of gaming communities. I am trying to build my own community and now have enough members to justify building a forum. So I know alot of the clans/gaming...
    Wed 7 Jun '17, 8:25am
Working...
X