Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 16 Jan 2012, 21:40
ebp123 ebp123 is offline
 
Join Date: Mar 2010
vbulletin 4.1.4 defaced using DBOL SQL

Im running vbulletin 4.1.4 ....My forum www.growboxforum.com was recently defaced using a program called DBOL...This has happened to me twice from not keeping the security patches updated on my forum....LESSON LEARNED!!

All my files are still intact from what I can tell, so i'm confident its just a matter of removing some files to restore the forum. The defacement was trying to get me to sign up and pay for a security website called privacyharbor.com.

I'm sure this has happened to other people besides me. I do not have a recent backup! If anyone knows how to fix this issue I would be extremely grateful.

Thanks
Reply With Quote
  #2  
Old 16 Jan 2012, 21:52
HMBeaty's Avatar
HMBeaty HMBeaty is offline
 
Join Date: Sep 2005
Real name: Brooks
Well, your AdminCP to still work. (http://www.growboxforum.com/admincp/) Have you checked your templates to see if any of them need reverted?

--------------- Added 16 Jan 2012 at 21:55 ---------------

Your forums still work too (http://www.growboxforum.com/search.p...e=vBForum_Post)
__________________
"Our greatest weakness lies in giving up. The most certain way to succeed is always to try just one more time!"
"It's important to only think about what you desire, not what you fear to achieve your ultimate goal!!
Reply With Quote
  #3  
Old 16 Jan 2012, 22:15
ebp123 ebp123 is offline
 
Join Date: Mar 2010
To be honest, i built the forum up myself and it did not take very much knowledge to do so. Im still rather clueless. Not sure what to check in the admincp. I do know how to navigate it so if you could elaborate i would be very grateful for your time and help
Reply With Quote
  #4  
Old 16 Jan 2012, 22:32
HMBeaty's Avatar
HMBeaty HMBeaty is offline
 
Join Date: Sep 2005
Real name: Brooks
Well, for 1, check your FORUMHOME template. See if that's been tampered with and needs reverting.

Also, check your .htaccess file and see if that's been tampered with. Same thing goes if you have an index.html file on your server.

Have you already reuploaded all default vB files?
__________________
"Our greatest weakness lies in giving up. The most certain way to succeed is always to try just one more time!"
"It's important to only think about what you desire, not what you fear to achieve your ultimate goal!!
Reply With Quote
  #5  
Old 16 Jan 2012, 23:46
ebp123 ebp123 is offline
 
Join Date: Mar 2010
Ok thanks for that info. I have not done anything with the default vb files. I understand I would have to go to my webserver and replace a folder?
Reply With Quote
  #6  
Old 17 Jan 2012, 01:01
HMBeaty's Avatar
HMBeaty HMBeaty is offline
 
Join Date: Sep 2005
Real name: Brooks
Here, see this post by Wayne Luke

https://www.vbulletin.com/forum/show...=1#post2246345
__________________
"Our greatest weakness lies in giving up. The most certain way to succeed is always to try just one more time!"
"It's important to only think about what you desire, not what you fear to achieve your ultimate goal!!
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 07:52.

Layout Options | Width: Wide Color: