Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 11 Apr 2009, 07:26
Osama11 Osama11 is offline
 
Join Date: May 2006
Unhappy site HAcked---Urgent

my site is getting hacked again n again..
i just did the backup data 30 mins ago n upgraded the scripts.,

AGAIN its get hackeddd...

i have vbulletin. 3.8.1
n my site is still hackeeed

help me how can i fixx my site .. n how can i secure my site..

plzzz help me guysssssssssss

www.onlinedesiclub.com
Reply With Quote
  #2  
Old 11 Apr 2009, 11:38
Swampfox Swampfox is offline
 
Join Date: Aug 2006
looks like they are just replacing your index.php page with their own, you can still access your site by going to other pages directly

obviously they have access to your server file system, its not necessarily a vbulletin issue, change all of your passwords including your server password and look at moving to a more secure host
Reply With Quote
  #3  
Old 11 Apr 2009, 12:01
dxflw dxflw is offline
 
Join Date: May 2008
Maybe format your pc first beacuse is possible that you have a keylogger ready installed to you pc and thirds persons knows your passwords and can easy access.After the format change all the passwords you use and then replace all your site files. And i think is important to delete all your forum styles and install again from the beggining.That will clean all your templates.

I m not sure 100% if that will finish your problem but its one possible way.
Reply With Quote
  #4  
Old 11 Apr 2009, 18:01
Osama11 Osama11 is offline
 
Join Date: May 2006
some 1 plzz help me how can i solve this isssue
Reply With Quote
  #5  
Old 11 Apr 2009, 18:04
Phobos49 Phobos49 is offline
 
Join Date: Jan 2009
Originally Posted by Osama11 View Post
some 1 plzz help me how can i solve this isssue
Change FTP-Password!!!!
Reply With Quote
  #6  
Old 11 Apr 2009, 18:06
Osama11 Osama11 is offline
 
Join Date: May 2006
i did every thing ..

but still its happeneing
Reply With Quote
  #7  
Old 11 Apr 2009, 18:20
Mellymonster Mellymonster is offline
 
Join Date: Oct 2008
Do this, go to your FTP, and see if there is a different page as in for the index, I've had this happen on one of my sites, its just a Index injections. You should just beable to remove the index they injected, and then change your index back to index.php...
Reply With Quote
  #8  
Old 11 Apr 2009, 18:25
Osama11 Osama11 is offline
 
Join Date: May 2006
Originally Posted by Mellymonster View Post
Do this, go to your FTP, and see if there is a different page as in for the index, I've had this happen on one of my sites, its just a Index injections. You should just beable to remove the index they injected, and then change your index back to index.php...
i did delete it ... but again. again they r hacking my site..

how can i secure my site
Reply With Quote
  #9  
Old 11 Apr 2009, 18:55
Lynne's Avatar
Lynne Lynne is offline
 
Join Date: Sep 2004
Real name: Lynne
As suggested in post 3, perhaps you've got a keylogger on your PC. If you keep changing the password, and they are immediately getting in again, it sounds like that is a good possibility.
__________________
Former vBulletin.org Staff Member

Try a search before posting for help. Many users won't, and don't, help if the question has been answered several times before.
W3Schools -
Online vBulletin Manual
If I post some CSS and don't say where it goes, put it in the additional.css template.
I will NOT help via PM (you will be directed to post in the forums for help.)
Reply With Quote
  #10  
Old 11 Apr 2009, 22:45
Osama11 Osama11 is offline
 
Join Date: May 2006
Originally Posted by Lynne View Post
As suggested in post 3, perhaps you've got a keylogger on your PC. If you keep changing the password, and they are immediately getting in again, it sounds like that is a good possibility.
how can i delte key looger from my cp.

do i have to reboot the computer?
Reply With Quote
  #11  
Old 11 Apr 2009, 23:17
Carolyn Carolyn is offline
 
Join Date: May 2007
I had to beef up my .htaccess file when I got hacked...just a thought.

http://httpd.apache.org/docs/1.3/howto/htaccess.html
http://www.javascriptkit.com/howto/htaccess.shtml
Reply With Quote
  #12  
Old 11 Apr 2009, 23:47
Lynne's Avatar
Lynne Lynne is offline
 
Join Date: Sep 2004
Real name: Lynne
Originally Posted by Osama11 View Post
how can i delte key looger from my cp.

do i have to reboot the computer?
I think you need to do much more than just reboot your computer. I suggest you google it. (I'm on a Mac and have no clue about what you should do.)
__________________
Former vBulletin.org Staff Member

Try a search before posting for help. Many users won't, and don't, help if the question has been answered several times before.
W3Schools -
Online vBulletin Manual
If I post some CSS and don't say where it goes, put it in the additional.css template.
I will NOT help via PM (you will be directed to post in the forums for help.)
Reply With Quote
  #13  
Old 12 Apr 2009, 00:03
ftechuk ftechuk is offline
 
Join Date: Apr 2009
When we started building a few Joomla sites, they got hacked regulary at the start till we hardened the server and tightened up permissions.

Backup your site. FTP into your public_html folder and sort the files by date order. This will show you the newest files in there or the when the files where last changed. You should go through every directory as you never know how deep into the folder structure the hack goes. Look for new files/files that have been changed recently. Apart from the index.php page which you say you have changed, if you havent installed anything new, any new files will be part of the hack. Delete them, replace your index.php again, then get someone who knows how to harden up your server/site to do it.

Just a thought, but check any image folders first, usually these have write permissions on them and thats how the hackers get in.
Reply With Quote
  #14  
Old 15 Apr 2009, 02:32
dxflw dxflw is offline
 
Join Date: May 2008
Some keyloggers easy very hard to find with a simple home antivirus or internet security software.The best software about is antivirus for companys like SOFOS (about 1000 $$).
I think my friend you should format your pc.Save the very important files from your pc and offcourse your site backups (if you have) and then begin the new installation of your OS.
Don't copy any .exe files or files you dont know about it with your important files for the backup.After the format make sure you have installed a good antivirus or better internet security software (payed licence not cracked) and then change all your pasword you are using in the internet.
This way maybe (not 100% sure) will solve your problem.If not i don't know how to continue.
Better contact you hosting company after the format.

--------------- Added 15 Apr 2009 at 02:37 ---------------

One think:
If your are webpage owner or you use your pc with the internet for important and sirius work then never trust something you don't know and never use cracks or cracked software (warez)
Use only original programs to have your head in silence.lol

Last edited by dxflw; 15 Apr 2009 at 02:37. Reason: Auto-Merged DoublePost
Reply With Quote
  #15  
Old 15 Apr 2009, 02:44
bleros's Avatar
bleros bleros is offline
 
Join Date: Oct 2008
Real name: Blero
Lynne has the right

Keylogger you have Osama in your pcc format and you must change all the password ..
__________________
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 01:27.

Layout Options | Width: Wide Color: