I think my forums been hacked!

please read this thread on my forum, i think it may have been hacked?

http://entrepreneurforum.co.uk/showthread.php?p=7631#post7631

any solutions

 

Maybe I have heard about this happening on other forums, best to check with vbulliten.com

 

Its probably the counters updating from when you deleted that top poster since, you have been getting database errors on the forum according to some of the members as well as activity for today and yesterday plus the others still remaining.

Otherwise i'd contact vB like HuggyStudios suggested.

 

i dont think its the rssfeed, because that 'bot' only posted in the news section on the forum, and posts from all accross the board have been removed,

 

Have you got backups? If so just fuse them together.

Theres a guide how to do it here: http://www.everymanhosting.com/forum/viewtopic.php?p=42

 

yes i will have to use them together, going to be tricky

 

You don't have it set to autoprune, do you?

 

no the posts were actually deleted i looked at the moderation logs

 

It could be a number of things, what vBulletin version are you on? Do you trust your staff that you have on admins/mods?

 

i have no staff on the forum im the only one who moderates it, but theres a few people with access to moderation, going to check there IPs now

 

The member on my forum who deleted all the posts was NeeJam

 

If your the only admin, then it has to be one of your mods or unlikely someone that knows your password and got into the admincp and messed around. If that was the case, only threads and posts lost with that would be lucky. But since that is the only thing gone it seems it would be a bad mod

 

yes it ws Neejam hes a member on this forum also

http://forums.digitalpoint.com/member.php?u=59134

and even had the cheek to give me a help post above, Njames

 

Well there you go, how did you track that down?

 

Then get your backups up and ban neejam

 

neejam is banned, but i need to merge the SQL together because i'll have lost some posts

I tracked it down by going through the admincp logs

 

So you modded neejam I suppose?

 

yes i remember he help me with something a while back and i forgot to remove mod access