I Think My server was hacked

Support for IntegraMOD 141

Moderator: Integra Moderator

I Think My server was hacked

PostAuthor: XHIBIT » Wed Aug 26, 2009 5:53 pm

when I try to read a forum post I get a blank page
example:
http://www.loadedparanormal.com/viewtopic.php?t=4473

Also Im missing my icon folder, all the icons are missing.

How can I get this back up ?
Its not just this one site either, its on 3 IntegraMod sites I have online, and I also have some sub video sites where thumbnails and video are missing.
[url=http][img=center]http://i206.photobucket.com/albums/bb186/XTVMOVIES/LP-ani.gif[/img][/url]
[url=http][img=center]http://i206.photobucket.com/albums/bb186/XTVMOVIES/ALBUM%203/rabbitbanner.jpg[/img][/url]
[url=http][img=center]http://5thshiftradio.top-site-list.com/images/banners/5thshiftradio.jpg[/img][/url]
User avatar
XHIBIT
Integra Member
Integra Member
 
Posts: 113
Likes: 0 post
Liked in: 0 post
Joined: Wed Jul 25, 2007 10:44 am
Cash on hand: 0.00

Re: I Think My server was hacked

PostAuthor: Helter » Wed Aug 26, 2009 8:24 pm

its a mess. Your images folder has a jumble of normal images, mixed with template images, template language images and mod images. This could not be done by hacking your forum. Your ftp may have been hacked, but I dont know why someone would just move your images. The code looks good still. Reupload fisubice and change to that template and see if all is still working.
Always use Protection
Image


Please do not PM for support
User avatar
Helter
Administrator
Administrator
 
Posts: 4168
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Mar 11, 2006 3:46 pm
Cash on hand: 187.60
Location: Seattle Wa
IntegraMOD version: IM 3

Re: I Think My server was hacked

PostAuthor: XHIBIT » Thu Aug 27, 2009 1:06 am

Well the thing is its the same on 3 different Integra sites I have.
Plus on my main site the entire icon folder is missing.

And last week I got an email from abuse saying my site had a link which was being redirected to thru my pathfile, to a spanish paypal page like a phishing attempt.
It was in a screenshot folder in es as the language which I didnt place there and deleted.

So if its an entire folder of forum icons missing I cant even reupload them now.
But how can I save my posts ?
[url=http][img=center]http://i206.photobucket.com/albums/bb186/XTVMOVIES/LP-ani.gif[/img][/url]
[url=http][img=center]http://i206.photobucket.com/albums/bb186/XTVMOVIES/ALBUM%203/rabbitbanner.jpg[/img][/url]
[url=http][img=center]http://5thshiftradio.top-site-list.com/images/banners/5thshiftradio.jpg[/img][/url]
User avatar
XHIBIT
Integra Member
Integra Member
 
Posts: 113
Likes: 0 post
Liked in: 0 post
Joined: Wed Jul 25, 2007 10:44 am
Cash on hand: 0.00

Re: I Think My server was hacked

PostAuthor: Helter » Thu Aug 27, 2009 12:48 pm

do you have ftp access to your site?
Always use Protection
Image


Please do not PM for support
User avatar
Helter
Administrator
Administrator
 
Posts: 4168
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Mar 11, 2006 3:46 pm
Cash on hand: 187.60
Location: Seattle Wa
IntegraMOD version: IM 3

Re: I Think My server was hacked

PostAuthor: .QUACK.Major.Pain » Thu Aug 27, 2009 2:34 pm

Have had someone upload crap into my screenshots folder several times and with the help of the guys, we cleaned it up and as suggested, it is best to change the permissions on the screenshot folder for no access. I believe I was told to set it to 000 for no access. Haven't had any problems since.

Seems you really were attacked some how.

.QUACK.Major.Pain
Sr Integra Member
Sr Integra Member
 
Posts: 986
Likes: 0 post
Liked in: 0 post
Joined: Sat Jan 27, 2007 10:15 am
Cash on hand: 0.00

Re: I Think My server was hacked

PostAuthor: XHIBIT » Fri Aug 28, 2009 12:33 am

Ok I found out they somehow got into the config.php and changed the permissions along with several other folders to 777 and had gained remote access.
So thats been taken care of and of course I will CHMOD everything all over again.
The view topic is working, but now that damn printer image, and the back to top icons are both displaying as text and its stretching the topic body page out.

I just realized as I was typing this that the reply to this post button is missing and there are no profiles in the posts either.

When I checked the forum profile page some of the links are missing as well.

This is probably the longest day of my life.

LOL
[url=http][img=center]http://i206.photobucket.com/albums/bb186/XTVMOVIES/LP-ani.gif[/img][/url]
[url=http][img=center]http://i206.photobucket.com/albums/bb186/XTVMOVIES/ALBUM%203/rabbitbanner.jpg[/img][/url]
[url=http][img=center]http://5thshiftradio.top-site-list.com/images/banners/5thshiftradio.jpg[/img][/url]
User avatar
XHIBIT
Integra Member
Integra Member
 
Posts: 113
Likes: 0 post
Liked in: 0 post
Joined: Wed Jul 25, 2007 10:44 am
Cash on hand: 0.00


Return to IntegraMOD 141

Who is online

Registered users: Bing [Bot], Google [Bot], Helter, Vendethiel