Hacked

[DBK]

My site was hacked (v3.6.5). I have a problem now. I'm reloading the site but whatever happened has screwed my administrator password (for the vB itself). I tried the password retrieval utility but it doesn't recognize the email, and if I go in the member list using my moderators accounts it doesn't list my email.

How can I get my administrator password sent to me, or manually reset? This could be a major PITA for me.

Thanks,
Dave

[DBK]

p.s, sorry I somehow clicked on the wrong section.

[turboguy]

DBK,

I have had the same thing happen to me and there are some answers to that in my thread up in the troubleshooting section. Look for resetting password by MySQL or something like that. I have not tried the fix yet but they did tell me how to fix it.

[Zachery]

You can use the following query via phpmyadmin or directly via mysql console to reset your password

UPDATE user
set password = MD5(concat(MD5('<NEWPASSWORD>'), user.salt))
WHERE userid = <USERID>

The only way someone could have changed your email/password is with DIRECT access to an admin account, or the database. If they somehow have database level access there is nothing vBulletin could have done to stop them from changing and editing your information. I highly advise contacting your webhost and have them email you new password and also scan your own system for virises/keyloggers.

[DBK]

I have no doubt that's what they did. Will reset the password now and get with host.

Thanks.