Forum hacked thinking of a new license

[Blhde]

The site was last up to date in 2010 so I am not sure what version we were running. The current admin does not want to deal with this as they no longer have the time. So I have been elected to rebuild and have zero experience in this.

We are collecting the funds to get the new version, and im looking for a bit of help. Can we just update over the old version or do we need to revert to a backup then update? The last backup was over a year ago and not in my possession I am not sure how much damage was done by the hacker as currently we have had the host lock the site down.

Also what about all the users info and their passwords? These must have been stolen, how do I address this issue?

[Amaury]

If you don't remember which version you were running, do you remember which series?

[Stallyon]

There's probably people here that would be willing to assist you in this. I just hope you realise now how important backups are?

But as Amaury said, do you remember if it was vBulletin 3 or vBulletin 4?

[Blhde]

I do believe we had ver 3. something. We do qualify for an upgrade, and are trying to collect the funds to purchase ver 4.

As of right now the host has the site locked to prevent any more unwanted access. I just need to get a ticket in to unlock it, but have no idea what to do once that is done.


If I had the power to make backups I would have, now I'm left holding the bag.

[Stallyon]

Once you've had it unlocked, I would turn the forum off completely (if your master admin account hasn't been hacked) under Settings > Options > Turn your vBulletin on/off to stop anyone else from using it. Then revoke any other admin access to ensure that no other admin accts have access if they've been compromised. That'd be the first steps. Then run the suspect file versions under Maintenance > Diagnostics. I'm not sure what version this tool was introduced in, but it should be there. Make a note of any files that are marked as "Not recognised as part of vBulletin" and list them here and someone will tell you what file needs to be removed to stop the exploit.

[Blhde]

Once things are back up I will post results, Thanks for the help.


Since we have decided to upgrade should I start a new topic in installations and upgrades?

[Stallyon]

Or in the support forum.

[Trevor Hannant]

Yes, please post in the appropriate forum for support. Please note that to get vB support on these forums you first need to be a licensed customer and register for Priority Forum Support. To do this, please go here:

http://members.vbulletin.com/membersupport_priority.php

...and enter your email address in one of the boxes. You'll need to have your customer number and password to access the page.

If you still have problems after doing this, send an email to [email protected]. Please include your user name, the email address you registered with and your customer number so we can fix the problem.