XOOPS 
Forum
Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk
  1. Board index / 
  2. XOOPS Community Support forums / 
  3. XOOPS general usage questions 
  4.  / My page was hacked
Register
1
peluffon
My page was hacked

  • 2006/8/4 16:53

  • peluffon

  • Just popping in

  • Posts: 14

  • Since: 2006/2/15


Hi, my page is www.conexionbahia.com.ar , it's in spanish, because i'm from argentina.
Yesterday my page was hacked, i try to fix it, but i couldn't do nothing, so i as for help here if someone can help me.

Thanks
2
nekro
Re: My page was hacked

  • 2006/8/4 17:36

  • nekro

  • Quite a regular

  • Posts: 213

  • Since: 2005/11/9


hola yo tambien soy de argentina...

asiq podemos hablar en castellano...

no tenes alguna manera de ingresar a la base de datos??
tenes algun backup del codigo de tu pagina???
no sabes si otras paginas de tu servidor o proveedor fueron tmb hackeadas???

tenes q salvar la base de datos... despues vemos el resto...


me parece q te va a andar...
3
svaha
Re: My page was hacked

  • 2006/8/4 17:39

  • svaha

  • Just can't stay away

  • Posts: 896

  • Since: 2003/8/2 2


It seems to me that somebody has overwritten your index.php file.

Can you logon to your site?
What doesn't kill me,
makes me stronger.

http://exm.amevita.eu
http://www.amevita.eu
http://www.alohaspirit.nl
4
nekro
Re: My page was hacked

  • 2006/8/4 17:42

  • nekro

  • Quite a regular

  • Posts: 213

  • Since: 2005/11/9


hace localmente en tu casa una pagina con el siguiente codigo:::

<form style="margin-top: 0px;" action="http://www.conexionbahia.com.ar /user.php" method="post">Nombre: <br /><input type="text" name="uname" size="12" value="" /><br />Contraseña: <br /><input type="password" name="pass" size="12" /><!-- <br /><input type="checkbox" name="rememberme" value="On" class ="formButton" /> //--><br /><input type="hidden" name="xoops_redirect" value="/modules/news/" /><input type="hidden" name="op" value="login" /><input type="submit" value="Ingresar" /><br />

</form>

logueta desde esta pagina y despues
trata de entrar a www.conexionbahia.com.ar/admin.php

CONTAME despues q es lo q pasa!
5
svaha
Re: My page was hacked

  • 2006/8/4 18:01

  • svaha

  • Just can't stay away

  • Posts: 896

  • Since: 2003/8/2 2


I see you have the myads module installed, maybe an old version that could be hacked.
What doesn't kill me,
makes me stronger.

http://exm.amevita.eu
http://www.amevita.eu
http://www.alohaspirit.nl
6
svaha
Re: My page was hacked

  • 2006/8/4 18:05

  • svaha

  • Just can't stay away

  • Posts: 896

  • Since: 2003/8/2 2


This is in your source :

color=#777777 EN? Transitional 4.01 HTML DTD W3C ?- PUBLIC <!DOCTYPE>&nbsp; 
<P align=center></STYLE>
<P align=center><B><FONT face=tahoma color=darkred size=5>H<SPAN lang=tr>ackeD BY MaRsHeLCeM || AYYILDIZ TEAM!</SPAN></FONT></B></P>
<P align=center>&nbsp;</P>
<P align=center><FONT face=Tahoma size=4><B>
<P align=center><IMG src="http://img92.imageshack.us/img92/6396/index3un.gif"></P><BR><BR>
<P align=center><FONT size=7>Turkish Hacker</FONT> </P>
<DIV align=center>
<TABLE borderColor=#000000 width="53%" align=center bgColor=#000000 border=1>
<TBODY>
<TR>
<TD bgColor=#000000></FONT><FONT face=Verdana color=#777777 EN? Transitional 4.01 HTML DTD W3C ?- PUBLIC <!DOCTYPE>
<P align=center></P>


Maybe it's enough to overwrite all your index files.
What doesn't kill me,
makes me stronger.

http://exm.amevita.eu
http://www.amevita.eu
http://www.alohaspirit.nl
7
Swain
Re: My page was hacked

  • 2006/8/4 20:20

  • Swain

  • Not too shy to talk

  • Posts: 198

  • Since: 2006/6/27


Once you get everything fixed, make sure you secure your site. Readhttps://xoops.org/modules/newbb/viewtopic.php?topic_id=51906&viewmode=flat&order=ASC&start=20
8
peluffon
Re: My page was hacked

  • 2006/8/5 17:45

  • peluffon

  • Just popping in

  • Posts: 14

  • Since: 2006/2/15


English:

Hi, thanks for your answers, sorry but i'm very busy these days. I'll try to fix the site, overwriting the index files and then i'll tell you what happen, thanks again.

Español:

nekro gracias por tu ayuda, me pude loguear asi que apague el sitio, ahora salvo la base de datos y desp capaz pruebo de sobreescribir los archivos index como dijo el otro usuario.

Gracias de nuevo
9
nekro
Re: My page was hacked

  • 2006/8/5 17:53

  • nekro

  • Quite a regular

  • Posts: 213

  • Since: 2005/11/9


me alegro... si tenes problemas no dudes en mandarme un mensaje privado...
10
peluffon
Re: My page was hacked

  • 2006/8/6 2:58

  • peluffon

  • Just popping in

  • Posts: 14

  • Since: 2006/2/15


Hi everyone, i've just fixed my site... Thanks to nekro, because i can fix it with his help.

Thanks everyone also

PD: i didn't need to overwrite nothing.
(1) 2 »

Login

Register now!  |  Lost Password?

Search

Advanced Search

Recent Posts

Who's Online

98 user(s) are online (56 user(s) are browsing Support Forums)

Members: 0

Guests: 98

more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: May 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits