Announcement
Collapse
No announcement yet.
Site hacked, can someone please help?
Collapse
This topic is closed.
X
X
-
Find the user, edit their number to be what you want it to be. Then run fix usernames in the admincp, that worked for me.
Leave a comment:
-
Originally posted by jaycob View Postin phpmyadmin? i cant find that option AUTO_INCREMENT when edit the last user? thanks mate.
Leave a comment:
-
Originally posted by Herzog View Postsearching more log files, we've narrowed down the hit on ours. Obviously a script followed by a person to check the status.
Run a search through your logs for a GET request of: /?page=
and a POST request of: /?page=[randompagetitle]/register.php?do=register
[randompagetitle] is random, including what they used in our logs would be irrelevent.
would re-uploading all vbulletin files help? thx
Leave a comment:
-
-
searching more log files, we've narrowed down the hit on ours. Obviously a script followed by a person to check the status.
Run a search through your logs for a GET request of: /?page=
and a POST request of: /?page=[randompagetitle]/register.php?do=register
[randompagetitle] is random, including what they used in our logs would be irrelevent.
Leave a comment:
-
Originally posted by vktechnology View PostI board got hacked too now is running fine
Instruction how to remove
1) Search for new update file and delete it
go to your root forum
and run this command to fine new update file
login as shell
find . -mtime -1 -print
(-1 is day of update file)
you might see this file and delete it
index.php
index.html
admincp/index.php
admincp/index.html
modcp/index.php
modcp/index.html
and delete unknow files
and Upload load original files you just delete it
2)reset admin login to admin cp
upload tools.php to admincp
and reset admin login
3)login to admincp and disable Cyb rules and install new version do not foget to over write it
4)Go to phpmyadmin
go to Table: user
4.1delete everything in this field = usertitle
UPDATE user SET usertitle = ''
4.2update this field customtitle =0
UPDATE user SET customtitle = '0' where customtitle = '1'
4.3. deelte user id that over '13371337'
4.4 Table: user > AUTO_INCREMENT set number to you real latest user
5)Go to admincp > user group > adminstrators
Delete user that you didn't add
6) admincp > update counter > update user title
this step you will get users title back
7) turn on board
---all done ---
im still getting after adding new user the id (id: 13371339)
user befor that is fine ie: 57000.
Leave a comment:
-
Originally posted by FallenBeauties View PostThere's no vbf.php file in my includes folder, weird.. But it is f*cked up, they said they haven't touched any files but it seems they did. + They f*cked up the database.
and yes to above up a few posts, when i add a new user its like user ID 123244533.
Originally posted by beishe8 View Post
Leave a comment:
-
Just another piece of advice, you may want to .htaccess your admincp and modcp (and also rename to something more secure if you wish)
Leave a comment:
-
I board got hacked too now is running fine
Instruction how to remove
1) Search for new update file and delete it
go to your root forum
and run this command to fine new update file
login as shell
find . -mtime -1 -print
(-1 is day of update file)
you might see this file and delete it
index.php
index.html
admincp/index.php
admincp/index.html
modcp/index.php
modcp/index.html
and delete unknow files
and Upload load original files you just delete it
2)reset admin login to admin cp
upload tools.php to admincp
and reset admin login
3)login to admincp and disable Cyb rules and install new version do not foget to over write it
4)Go to phpmyadmin
go to Table: user
4.1delete everything in this field = usertitle
UPDATE user SET usertitle = ''
4.2update this field customtitle =0
UPDATE user SET customtitle = '0' where customtitle = '1'
4.3. deelte user id that over '13371337'
4.4 Table: user > AUTO_INCREMENT set number to you real latest user
5)Go to admincp > user group > adminstrators
Delete user that you didn't add
6) admincp > update counter > update user title
this step you will get users title back
7) turn on board
---all done ---Last edited by vktechnology; Wed 4 May '11, 10:49pm.
Leave a comment:
-
Originally posted by jaycob View Postwhat hack is vba.php please.
Leave a comment:
-
There's no vbf.php file in my includes folder, weird.. But it is f*cked up, they said they haven't touched any files but it seems they did. + They f*cked up the database.
Leave a comment:
Related Topics
Collapse
-
I just signed up for vbulletin. It is used in a lot of gaming communities. I am trying to build my own community and now have enough members to justify building a forum. So I know alot of the clans/gaming...
-
Channel: vB Cloud Support & Troubleshooting.
Wed 7 Jun '17, 9:25am -
Leave a comment: