1
Catzwolf
Need Help With tracking hacker
  • 2004/12/21 19:09

  • Catzwolf

  • Home away from home

  • Posts: 1392

  • Since: 2007/9/30


Gameinatrix.com Hacked

http://www.gameinatrix.com/

A friend of mines website was hacked today, I was wondering if anyone else has had theirs hacked by this group 'NeverEverNoSanity WebWorm generation 14.'?

It seems they uploaded the an index.html file to the upload folder of the site.

Any help would be helpfull

ATB

Catz

2
studioC
Re: Need Help With tracking hacker
  • 2004/12/21 19:13

  • studioC

  • Friend of XOOPS

  • Posts: 922

  • Since: 2003/12/7


hello catz

perhaps this article will help you ?
http://www.kaspersky.com/news?id=156681162


michael

3
studioC
Re: Need Help With tracking hacker
  • 2004/12/21 19:17

  • studioC

  • Friend of XOOPS

  • Posts: 922

  • Since: 2003/12/7


if he was using phpbb i found a workaround on viewtopic.php
http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=240513


michael

4
Catzwolf
Re: Need Help With tracking hacker
  • 2004/12/21 19:20

  • Catzwolf

  • Home away from home

  • Posts: 1392

  • Since: 2007/9/30


Hey studioC,

Thanx for the heads up on this one.

From what I can see it states phpbb, yet this site uses the previous beta version off the new XOOPS forum.

So will this affect the newer release of the forum?

ATB

Catz

5
waterkid
Re: Need Help With tracking hacker
  • 2004/12/22 0:48

  • waterkid

  • Just popping in

  • Posts: 6

  • Since: 2004/12/7


My website was infected by this worm as well. Other xoopsters helped me understand the problem...basic lowdown...

The worm infects a server through the phpBB software (NOT newBB). From there it can infect other website files on that same server even if those accounts are not using phpBB.

Tell your friend to contact their web hosting service. They will most likely have to do a website restore from the latest backup. That hosting service will also need to find the source (those using phpBB) and fix the problem.

Waterkid

6
m0nty
Re: Need Help With tracking hacker
  • 2004/12/22 0:59

  • m0nty

  • XOOPS is my life!

  • Posts: 3337

  • Since: 2003/10/24


it also affects invision and vbulletin forums too from what i have read.. the php vulnerability allows the virus to traverse thru all the servers directories and overwrites all files that are 777 or 666 world writable..

Login

Who's Online

220 user(s) are online (23 user(s) are browsing Support Forums)


Members: 0


Guests: 220


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Oct 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits