Hacked and or Defaced....NOW WHAT???

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • voclain
    Senior Member
    • Aug 2002
    • 411
    • 3.0.3
    #1

    [Forum] Hacked and or Defaced....NOW WHAT???

    A long while ago.....probably 4 or 5 years or more now....I was "DEFACED"....and fixing it was super easy....my server had preformed a backup the night before and we just did a restore from the night before and we lost about 6 hours of data and all was great.

    NOW.....I'm on 4.2 and I have this totally awesome dedicated server and RAID 5 backup system and never ever considered a DEFACEMENT....so.....it appears I do not have any backup...as in nothing recent...I have something from several years ago when I upgraded to 4...but nothing since the backup.

    So....I checked the database and all files there seem to be in tact.......

    So....I pay some people to help me with keeping this maintained....and they are asking me to do a full 4.2 re-install and then re-connect the database.

    IS THIS WHAT I SHOULD DO?????

    Let me know your thinking????? I'm always so impressed with all your knowledge and help.

    LET ME KNOW....

    Yours,

    Kirk Voclain

    Tags: None
    • voclain
      Senior Member
      • Aug 2002
      • 411
      • 3.0.3
      #2
      I know I seem IMPATIENT....but HELP??? Please????

      Kirk

        Comment

        • hurricane_sh
          Senior Member
          • Mar 2005
          • 171
          #3
          Re-install doesn't necessarily help, I wouldn't do that. Find all changes that the hack made, undo them.

            Comment

            • borbole
              Senior Member
              • Feb 2010
              • 3074
              • 4.0.0
              #4
              How were you hacked? Can you post the link to your forum?

                Comment

                • voclain
                  Senior Member
                  • Aug 2002
                  • 411
                  • 3.0.3
                  #5
                  Content of all php files was deleted and replaced with the hacker's message.
                  Last edited by voclain; Fri 13 Sep '13, 9:47am.

                    Comment

                    • voclain
                      Senior Member
                      • Aug 2002
                      • 411
                      • 3.0.3
                      #6
                      Anything else?

                      My friends who do my maintenance want me to do a full and new install....and then....link back to the database to fixe the content of all the PHP files that was deleted with the hackers message.

                      Are the VB folks agreeing that this is the best plan of action???

                      Kirk

                        Comment

                        • Mark.B
                          vBulletin Support
                          • Feb 2004
                          • 24287
                          • 6.0.X
                          #7
                          Please read the following two blog posts:
                          Fixing your site after you have been hacked. - vBulletin Community Forum
                          http://www.vbulletin.com/forum/blogs/zachery/3993888-fixing-your-site-after-you-have-been-hacked
                          This guide is for what to do, after you’ve been hacked, exploited, and or defaced. Step 1, Change everything: If you believe, or think your site has


                          Best practices for securing your vBulletin site. - vBulletin Community Forum
                          http://www.vbulletin.com/forum/blogs/zachery/3993849-best-practices-for-securing-your-vbulletin-site
                          Getting Started This guide is intended to be a starting point for helping to keep your site safe and secure in the long run. It is not a be-all, end-all guide


                          Also please see these recent security announcements:

                          vBulletin 4.1.x-4.2.x & All versions of vBulletin 5: http://www.vbulletin.com/forum/forum...-1-vbulletin-5
                          vBulletin 5.0.x patch released, for a different security issue: http://www.vbulletin.com/forum/forum...d-all-versions
                          MARK.B
                          vBulletin Support
                          ------------
                          My Unofficial vBulletin 6.0.0 Demo: https://www.talknewsuk.com
                          My Unofficial vBulletin Cloud Demo: https://www.adminammo.com

                            Comment

                            Previous template Next
                            widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
                            Working...