XOOPS 
Forum
Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk
  1. Board index / 
  2. XOOPS Community Support forums / 
  3. XOOPS general usage questions 
  4.  / Xoops Hacked?
Register
1
rudycash
Xoops Hacked?

  • 2006/2/25 7:10

  • rudycash

  • Just popping in

  • Posts: 70

  • Since: 2004/2/12


One of my clients has a XOOPS based site. He says he is getting hundreds of e-mails like this.

From: departure@pass22.dizinc.com
Date: 24 February 2006 09:25:44 GMT
To:
Subject: Online Weddings Enquiry
Subject: less thin two years

on their journey. hey were about half a mile from the highway, said an elderly woman who was laying some bushes of heath under the kettle. alf a

they are from an e-mail address - departure@pass22.dizinc

who is this? pass22 is the name of the server at surpass that he is on

Now he says he can't log in to the XOOPS based part of his site

when he does he gets a blank page and the URL redirects to

http://www.mysite.com/index.php?PHPSESSID=909940376c3d49f057fa61067e5701d6 (I've edited this link so it no longer works!!- sorry - I still need to know what happened.

When it should be http://www.mysite.com/admin.php - I think

Any ideas - Help required urgently


[To be safe the links have been removed] Bluenova
2
gestroud
Re: Xoops Hacked?

  • 2006/2/25 7:56

  • gestroud

  • Home away from home

  • Posts: 1538

  • Since: 2004/12/22


[size=x-large]DO NOT CLICK THAT LINK!!!!!!!!!!!!!!!!![/size] My antivirus program stopped 5 viruses that tried to download to my computer!!!!!!!!!
3
rudycash
Re: Xoops Hacked?

  • 2006/2/25 7:59

  • rudycash

  • Just popping in

  • Posts: 70

  • Since: 2004/2/12


Which link????

So it has been hacked??

How can I turn off the site if I can't log in
4
gestroud
Re: Xoops Hacked?

  • 2006/2/25 8:03

  • gestroud

  • Home away from home

  • Posts: 1538

  • Since: 2004/12/22


I clicked on the second link, the one it should be. to turn it off, you have to go into phpmyadmin. i'm trying to remember which table it is. either option or config options. let you know in a minute.
5
rudycash
Re: Xoops Hacked?

  • 2006/2/25 8:05

  • rudycash

  • Just popping in

  • Posts: 70

  • Since: 2004/2/12


Can I re-install XOOPS to overwrite the files?
6
gestroud
Re: Xoops Hacked?

  • 2006/2/25 8:10

  • gestroud

  • Home away from home

  • Posts: 1538

  • Since: 2004/12/22


Probably, but I would turn it off and go through my files and folders first to see what happened and how it happened. I'd also go through the site's log files.
7
gestroud
Re: Xoops Hacked?

  • 2006/2/25 8:12

  • gestroud

  • Home away from home

  • Posts: 1538

  • Since: 2004/12/22


I'd also suggest you do a virus check on your computer ASAP. I'm running one now and already found three.
8
rudycash
Re: Xoops Hacked?

  • 2006/2/25 8:18

  • rudycash

  • Just popping in

  • Posts: 70

  • Since: 2004/2/12


I'm on a Mac - but I'll check anyway

Thanks for your help -

Have you worked out how I'd turn it off.
9
gestroud
Re: Xoops Hacked?

  • 2006/2/25 8:33

  • gestroud

  • Home away from home

  • Posts: 1538

  • Since: 2004/12/22


ok, you need to get into phpmyadmin and look for the _config table. Browse the table until you see a row called "closesite." You want to set the value to 1. That should work. I'm going to get offline now; don't like the idea of being online when I know my computer is infected. Hope everything works out.
10
davidl2
Re: Xoops Hacked?

  • 2006/2/25 11:32

  • davidl2

  • XOOPS is my life!

  • Posts: 4843

  • Since: 2003/5/26


First things first - what version of XOOPS is he running?

Login

Register now!  |  Lost Password?

Search

Advanced Search

Recent Posts

Who's Online

384 user(s) are online (313 user(s) are browsing Support Forums)

Members: 0

Guests: 384

more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Nov 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits