Sub Menu
Links Menu
Online Users

In total there are 305 users online :: 3 registered, 0 hidden and 302 guests

Most users ever online was 1091 on Wed Aug 16, 2023 5:27 pm

Registered users: Bing [Bot], Google [Bot], Majestic-12 [Bot] based on users active over the past 60 minutes

Help after hack...

Support for IntegraMOD 141

Moderator: Integra Moderator

Help after hack...

PostAuthor: Maddeen » Sun May 15, 2011 4:00 am

Hi there,

my forum was hacked last night - i believe nothing dramatic -

After i replaced it with my backup everything looks fine - but now i have some questions - hopefully you can help me.
EDIT; Server says "The requested URL /web/news_index.php was not found on this server." - thats true but i havent also one in my backup <img>
Is it possible to download IM141 new and extract only this file and use it without problems?!

this are my first steps.
changed root ftp pass
changed root sql pass
mailing to users to change password (is there a possiblity to force them by the forum itselfs? )

is this everything i can do ?
i looked at the "config.php" with all my connection infos. is there a possibility to get it encrypted?
Are there other security options? Or an option to proof if nothing was changed e.g. to snif passwords or usernames?

Sorry, but my english isn ´t good and i got no idea what can i do against this :-/

P.S Offtopic - can i switch from IM1.41 to IM3beta without problems? i only want to keep my forums topics, post, users etc. (history) - configuration isn ´t necessary.

big thanks in advance.

Maddeen
Newbie
Newbie
 
Posts: 22
Likes: 0 post
Liked in: 0 post
Joined: Tue Jan 30, 2007 4:04 pm
Cash on hand: 0.00

Re: Help after hack...

PostAuthor: Helter » Sun May 15, 2011 6:32 pm

he probably edited the file through acp/eXtreme Styles which means he may have simply browsed to your backup folder and grabbed a copy of your database.

did you follow the after install instructions and rename your backup folder and update acp/extra with this new folders name?
also check the folder pafiledb/images/screenshots for any .php files. If you find one delete it. Disable Admin and Mod accounts until they can reset their passwords.
Those are the only two ways I know of to compromise your site other than brute forcing your ftp or cpanel passwords

Currently the IM3 beta is on hold while Michealo completes the latest portal version.
Always use Protection
Image


Please do not PM for support
User avatar
Helter
Administrator
Administrator
 
Posts: 4167
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Mar 11, 2006 3:46 pm
Cash on hand: 172.60
Location: Seattle Wa
IntegraMOD version: IM 3

Re: Help after hack...

PostAuthor: Maddeen » Mon May 16, 2011 9:07 am

Hi Helter,

thanx a lot - i ´ll try it, but where do i find the "after install instructions"? In the installationpack of IM141? - hopefully this kid with tooo many freetime never come back <img>

nice day

Maddeen
Newbie
Newbie
 
Posts: 22
Likes: 0 post
Liked in: 0 post
Joined: Tue Jan 30, 2007 4:04 pm
Cash on hand: 0.00

Re: Help after hack...

PostAuthor: Helter » Mon May 16, 2011 1:16 pm

it is in the install file fir IM141. It is also hosted here on page 2
http://www.integramod.com/forum/web.php ... install_p2
Always use Protection
Image


Please do not PM for support
User avatar
Helter
Administrator
Administrator
 
Posts: 4167
Likes: 0 post
Liked in: 0 post
Images: 0
Joined: Sat Mar 11, 2006 3:46 pm
Cash on hand: 172.60
Location: Seattle Wa
IntegraMOD version: IM 3


Return to IntegraMOD 141

Who is online

Registered users: Bing [Bot], Google [Bot], Majestic-12 [Bot]

cron