Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
Pages: [1]
Send this topic | Print
Topic: please help  (Read 1910 times)
« on: December 21, 2004, 10:59:55 PM »
Junior Member
.rp Offline
Junior Member
Newbie

View Profile WWW
*
Posts: 34



some as***** hacked my website for the third time, but now i can't get rid of this page that they put
my login is rpws
www.digo.ws
Report to moderator   Logged

 
« Reply #1 on: December 21, 2004, 11:00:53 PM »
Junior Member
.rp Offline
Junior Member
Newbie

View Profile WWW
*
Posts: 34



i think they hacked b2evolution but i'm not shure...
and the forum...
Report to moderator   Logged
« Reply #2 on: December 22, 2004, 12:29:17 AM »
Junior Member
.rp Offline
Junior Member
Newbie

View Profile WWW
*
Posts: 34



got everything back to normal... how can i better protect my website?
Report to moderator   Logged
« Reply #3 on: December 22, 2004, 08:08:11 PM »
CravenBW
Guest

You might want to check and make sure that you don't have any insecure scripts running and run the most up to date version of any scripts that you are using. Also you may want to change your password and if you have any FTP accounts set up for friends or any other FTP accounts set up period you may want to change those as well.
Report to moderator   Logged
« Reply #4 on: December 22, 2004, 09:44:14 PM »
Junior Member
.rp Offline
Junior Member
Newbie

View Profile WWW
*
Posts: 34



thnx
everything is up to date and i have no other accounts
Report to moderator   Logged
« Reply #5 on: December 22, 2004, 11:12:40 PM »
Alex Melen Offline
President / Founder
Administrator
Addict

View Profile WWW
*****
Posts: 1,990



There are 3 ways in which accounts get hacked:

1. Insecure scripts (most common).

2. Someone guesses or knows your password.

3. Your home pc has a virus which allows hackers to get the password you use to get into your account.

Each one of the three above require its own precautions.
Report to moderator   Logged

« Reply #6 on: December 23, 2004, 06:44:37 PM »
Junior Member
.rp Offline
Junior Member
Newbie

View Profile WWW
*
Posts: 34



now i know what happend... it was a new worm that atacks phpbb forums...
here is the page to see what it does to pages
http://beta.search.msn.com/results.aspx?q=%22this+site+is+defaced%22&first=11&count=10&FORM=PERE

it changes this pages:
asp
htm
jsp
php
phtm
shtm

to this content:
This site is defaced!!!
This site is defaced!!!
NeverEverNoSanity WebWorm generation (and the number at the end i had - 9)

so if someone has a phpbb  2.0.11 or lower, upgrade as fast as you ca!!!
the worm searches trough google and find the websites with this version, and then sends some line of code and ... you know the result
it attacks all of your pages, listed above

i had a phpbb plus forum i think it was 1.52
i had new forum, but didn't delete this one, and paid for it...  Smiley
Report to moderator   Logged
 
Pages: [1]
Send this topic | Print
Jump to:  

Powered by SMF | SMF © 2006-2008, Simple Machines LLC