my site is hacked and showing message

Discussion in 'Security' started by Salman Qamar, Jul 1, 2010.

0
  1. #1
    when i open my site it shows following




    [#]FauK you admin [#]

    [#] لـعـــيــون ^_* تـــنــــي [#]





    [#] Hacked By BO3LA-HaCkEr Add my: [#]



    >إلكينج بعله في الهـكر مدرسة .. سبب لإصحاب الحمإيات وسوسة<



    >لا داعي للخوف من صوت الرصاص فإن الرصاصة التي تقتلك لا تسمع صوتها<



    >يإ عزيزي الأدمن أعلم أنك في إستضافة قوية جداً .. ونادراً ما يوجد بمواقعها ثغرات<



    >أعلم أن كلمإ زادت الحماية صلإبة .. زاد حمإسي لإختراقها وتخطيها بأقدامي ألذهبية<







    [!] ورا كل ضحكت هكر دمعت ضحيـة [!]



    [!] نرى مالا ترون ونفعل ما لا تفعلون وسنريكوم مانحن بكم فاعلون [!]



    [!] كرهت المدرسة و التدريس ولا عاد لي با القلم خاطر الله يلعنك يا ابليس خليتني في الهكر شاطر [!]



    معقد نفسياً مشتت ذهنياً متورط عائلياً منتحر علمياً



    we Alattaban Give live colors * i will not stop hacked on site





    الإهـــداءات :: ArTiN + M5_HeTliR ::





    BO3LA-HACkEr :

    BO3LA-HACkEr :



    BO3LA-HaCkEr :



    BO3LA-HaCkEr :



    Tell Me : 009710505322312

    SeE YoU





    #*20092010*#

    the sourse code of this page is
    <html dir="rtl">

<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>BO3LA-HaCkEr :: تــم الإختـــرآق بوآسطـــة</title>
</head>

<body bgcolor="#000000">

<p align="center">
      <img border="0" src="http://www.east-fy.com/vb/index_files/ha111c.gif" width="244" height="264"></p>
<p align="center">&nbsp;</p>
      <p align="center"><b><span lang="ar-sa">
      <font face="Comic Sans MS" color="#ffffff" size="7">[</font><font face="Comic Sans MS" color="#ff0000" size="7">#</font><font face="Comic Sans MS" color="#ffffff" size="7">]</font></span></b><i><b><font color="#FFFFFF" size="7">F</font><font size="7" color="#FF0000">a</font><font color="#FFFFFF" size="7">u</font><font size="7" color="#FF0000">K</font><font color="#FFFFFF" size="7">
      y</font><font size="7" color="#FF0000">o</font><font color="#FFFFFF" size="7">u

</font><font size="7" color="#FF0000">a</font><font color="#FFFFFF" size="7">d</font><font size="7" color="#FF0000">m</font><font color="#FFFFFF" size="7">i</font><font size="7" color="#FF0000">n<span lang="ar-kw">
</span></font></b></i><b><span lang="ar-sa">
<font face="Comic Sans MS" color="#ffffff" size="7">[</font><font face="Comic Sans MS" color="#ff0000" size="7">#</font><font face="Comic Sans MS" color="#ffffff" size="7">]</font></span></b></p>
<p align="center"><b><span lang="ar-sa">
      <font face="Comic Sans MS" color="#ffffff" size="7">[</font><font face="Comic Sans MS" color="#ff0000" size="7">#</font><font face="Comic Sans MS" color="#ffffff" size="7">]</font></span></b><span lang="ar-sa"><font size="7" color="#FF0000"><b><i>

لـ</i></b></font><font size="7" color="#FFFFFF"><b><i>عـــ</i></b></font><font size="7" color="#FF0000"><b><i>ي</i></b></font></span><i><b><span lang="ar-sa"><font size="7" color="#FF0000">ــ</font><font size="7" color="#FFFFFF">و</font><font size="7" color="#FF0000">ن
</font><font size="7" color="#FFFFFF">^</font><font size="7" color="#FF0000">_</font><font size="7" color="#FFFFFF">*
</font></span><font size="7" color="#FF0000"><span lang="ar-sa">تـ</span></font></b></i><font size="7" color="#FFFFFF"><span lang="ar-sa"><b><i>ــ</i></b></span></font><i><b><span lang="ar-sa"><font size="7" color="#FFFFFF">نـ</font></span><span lang="ar-kw"><font size="7" color="#FF0000">ــ</font></span><span lang="ar-sa"><font size="7" color="#FFFFFF">ـي</font></span><font size="7" color="#FF0000"><span lang="ar-kw">
</span></font></b></i><b><span lang="ar-sa">
<font face="Comic Sans MS" color="#ffffff" size="7">[</font><font face="Comic Sans MS" color="#ff0000" size="7">#</font><font face="Comic Sans MS" color="#ffffff" size="7">]</font></span></b></p>
<p align="center">&nbsp;</p>
<p align="center"><img height="7" src="http://www.up-00.com/xafiles/PC280642.gif" width="502" border="0"></p>
<p align="center">&nbsp;</p>
<p align="center"><b><span lang="ar-sa">
<font face="Comic Sans MS" color="#ffffff" size="7">[</font><font face="Comic Sans MS" color="#ff0000" size="7">#</font><font face="Comic Sans MS" color="#ffffff" size="7">]</font><font face="Comic Sans MS" color="#ffffff" size="5">&nbsp;

</font></span><font face="Comic Sans MS" color="#ffffff" size="5">&nbsp;</font><font face="Comic Sans MS" color="#FF0000" size="5">H</font><font face="Comic Sans MS" color="#ffffff" size="5">a</font><font face="Comic Sans MS" color="#FF0000" size="5">c</font><font face="Comic Sans MS" color="#ffffff" size="5">k</font><font face="Comic Sans MS" color="#FF0000" size="5">e</font><font face="Comic Sans MS" color="#ffffff" size="5">d </font>
<font face="Comic Sans MS" color="#FF0000" size="5">B</font><font face="Comic Sans MS" color="#ffffff" size="5">y
<span lang="en-us">BO3LA-HaCkEr</span> </font>
<font face="Comic Sans MS" color="#FF0000" size="5">Add</font><font face="Comic Sans MS" color="#ffffff" size="5">
m</font><font face="Comic Sans MS" color="#FF0000" size="5">y</font><font face="Comic Sans MS" color="#ffffff" size="5">:

<span lang="en-us">TiNe@hotmail.com</span><span lang="ar-sa">&nbsp; </span></font>
<span lang="ar-sa"><font face="Comic Sans MS" color="#ffffff" size="7">[</font><font face="Comic Sans MS" color="#ff0000" size="7">#</font><font face="Comic Sans MS" color="#ffffff" size="7">]</font></span></b></p>
      <p align="center">&nbsp;</p>
<p align="center"><span lang="ar-sa">
<font face="Tahoma" color="#008000" size="4">&gt;</font><font face="Tahoma" color="#FFFFFF" size="4">إلكينج
بعله في الهـكر مدرسة .. سبب لإصحاب الحمإيات وسوسة</font><font face="Tahoma" size="4" color="#008000">&lt;</font></span></p>

<p align="center">&nbsp;</p>
<p align="center"><span lang="ar-sa">
<font face="Tahoma" color="#008000" size="4">&gt;</font><font face="Tahoma" color="#ffffff" size="4">لا
داعي للخوف من صوت الرصاص فإن الرصاصة التي تقتلك لا تسمع صوتها</font><font face="Tahoma" color="#008000" size="4">&lt;</font><font face="Tahoma" color="#ffffff" size="4">&nbsp;</font></span></p>
<p align="center">&nbsp;</p>
<p align="center"><span lang="ar-sa">

<font face="Tahoma" color="#008000" size="4">&gt;</font><font face="Tahoma" color="#FFFFFF" size="4">يإ
عزيزي الأدمن أعلم أنك في إستضافة قوية جداً .. ونادراً ما يوجد بمواقعها ثغرات</font><font face="Tahoma" color="#008000" size="4">&lt;</font><font face="Tahoma" color="#ffffff" size="4">&nbsp;</font></span></p>
<p align="center">&nbsp;</p>
<p align="center"><span lang="ar-sa">

<font face="Tahoma" color="#008000" size="4">&gt;</font><font face="Tahoma" color="#FFFFFF" size="4">أعلم
أن كلمإ زادت الحماية صلإبة .. زاد حمإسي لإختراقها وتخطيها بأقدامي ألذهبية</font><font face="Tahoma" color="#008000" size="4">&lt;</font><font face="Tahoma" color="#ffffff" size="4">&nbsp;</font></span></p>
<p align="center">&nbsp;</p>
<p align="center">&nbsp;</p>
<p align="center">&nbsp;</p>
   <p align="center">

   <img height="7" src="http://www.up-00.com/xafiles/PC280642.gif" width="502" border="0"></p>
   <p align="center"><font face="Tahoma" color="#ffffff" size="4">[</font><font face="Tahoma" color="#00ff00" size="4"><span lang="ar-sa">!</span></font><font face="Tahoma" color="#ffffff" size="4">]<span lang="ar-sa">
   ورا كل ضحكت هكر
   دمعت ضحي</span><span lang="ar-ae">ـة</span><span lang="ar-sa">
   </span>[</font><font face="Tahoma" color="#00ff00" size="4"><span lang="ar-sa">!</span></font><font face="Tahoma" color="#ffffff" size="4">]</font></p>

   <p align="center">&nbsp;</p>
   <p align="center">
   <img height="7" src="http://www.up-00.com/xafiles/PC280642.gif" width="502" border="0"></p>
   <p align="center"><font face="Tahoma" color="#ffffff" size="4">[</font><font face="Tahoma" color="#00ff00" size="4"><span lang="ar-sa">!</span></font><font face="Tahoma" color="#ffffff" size="4">]<span lang="ar-sa">
   نرى مالا ترون ونفعل ما لا تفعلون وسنريكوم مانحن بكم فاعلون&nbsp; </span>[</font><font face="Tahoma" color="#00ff00" size="4"><span lang="ar-sa">!</span></font><font face="Tahoma" color="#ffffff" size="4">]</font></p>

   <p align="center">&nbsp;</p>
   <p align="center">
   <img height="7" src="http://www.up-00.com/xafiles/PC280642.gif" width="502" border="0"></p>
   <p align="center"><font face="Tahoma" color="#ffffff" size="4">[</font><font face="Tahoma" color="#00ff00" size="4"><span lang="ar-sa">!</span></font><font face="Tahoma" color="#ffffff" size="4">]<span lang="ar-sa">
   كرهت المدرسة و التدريس ولا عاد لي با القلم خاطر الله يلعنك يا ابليس خليتني
   في الهكر شاطر </span>[</font><font face="Tahoma" color="#00ff00" size="4"><span lang="ar-sa">!</span></font><font face="Tahoma" color="#ffffff" size="4">]</font></p>

   <p align="center">&nbsp;</p>
   <p align="center">
   <img height="7" src="http://www.up-00.com/xafiles/PC280642.gif" width="502" border="0"></p>
   <p align="center"><font face="Arial ,Tahoma" color="#ffffff" size="4">
   <marquee style="FONT-WEIGHT: bold; FONT-SIZE: 18pt; COLOR: #ffffff; FONT-FAMILY: Tahoma" direction="right" width="574" height="68">معقد نفسياً مشتت ذهنياً متورط عائلياً منتحر علمياً</marquee></font><img height="7" src="http://www.up-00.com/xafiles/PC280642.gif" width="502" border="0"></p>

   <p align="center">&nbsp;</p>
   <p align="center"><font face="Arial ,Tahoma" color="#ffffff" size="4">
   <marquee style="FONT-WEIGHT: bold; FONT-SIZE: 18pt; COLOR: #ffffff; FONT-FAMILY: Tahoma" width="568" height="36">we Alattaban Give live colors          *          i will not stop hacked on site</marquee></font></p>
      <p align="center">&nbsp;</p>
      <p align="center"><img height="7" src="http://www.up-00.com/xafiles/PC280642.gif" width="502" border="0"></p>
      <p align="center">&nbsp;</p>
<p align="center"><b><font face="Arial ,Tahoma" size="6" color="#00FF00">
الإهـــداءات
:: <span lang="en-us">ArTiN + M5_HeTliR&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span> ::</font></b></p>

<p align="center">&nbsp;</p>
<p align="center"><img height="7" src="http://www.up-00.com/xafiles/PC280642.gif" width="502" border="0"></p>
<p align="center">&nbsp;</p>
<p align="center"><font face="Arial ,Tahoma" color="#ffffff" size="4">
   <marquee style="FONT-WEIGHT: bold; FONT-SIZE: 18pt; COLOR: #ffffff; FONT-FAMILY: Tahoma" direction="right" width="481" height="68">BO3LA-HACkEr : BO3LA-HaCkEr@hotmail.com</marquee></font></p>
      <p align="center"><font face="Arial ,Tahoma" color="#ffffff" size="4">
   <marquee style="FONT-WEIGHT: bold; FONT-SIZE: 18pt; COLOR: #ffffff; FONT-FAMILY: Tahoma" direction="right" width="481" height="68">BO3LA-HACkEr : TiNe_-@hotmail.com</marquee></font></p>
      <p align="center"><img height="7" src="http://www.up-00.com/xafiles/PC280642.gif" width="502" border="0"></p>
      <p align="center">&nbsp;</p>
      <p align="center"><font face="Arial ,Tahoma" color="#ffffff" size="4">

   <marquee style="FONT-WEIGHT: bold; FONT-SIZE: 18pt; COLOR: #ffffff; FONT-FAMILY: Tahoma" direction="right" width="481" height="68">BO3LA-HaCkEr : eze@hotm4il.com</marquee></font></p>
      <p align="center"><img height="7" src="http://www.up-00.com/xafiles/PC280642.gif" width="502" border="0"></p>
      <p align="center">&nbsp;</p>
      <p align="center"><font face="Arial ,Tahoma" color="#ffffff" size="4">
   <marquee style="FONT-WEIGHT: bold; FONT-SIZE: 18pt; COLOR: #ffffff; FONT-FAMILY: Tahoma" direction="right" width="542" height="68">BO3LA-HaCkEr : BO3LA_O16@hotmail.com</marquee></font></p>
      <p align="center"><img height="7" src="http://www.up-00.com/xafiles/PC280642.gif" width="502" border="0"></p>
      <p align="center">&nbsp;</p>
      <p align="center"><font face="Arial ,Tahoma" color="#ffffff" size="4">

   <marquee style="FONT-WEIGHT: bold; FONT-SIZE: 18pt; COLOR: #ffffff; FONT-FAMILY: Tahoma" direction="right" width="379" height="68">Tell Me : 009710505322312</marquee></font></p>
      <p align="center"><b><font face="Comic Sans MS" color="#ffffff" size="6">
      S</font><font face="Comic Sans MS" color="#ff0000" size="6">e</font><font face="Comic Sans MS" color="#ffffff" size="6">E
      Y</font><font face="Comic Sans MS" color="#ff0000" size="6">o</font><font face="Comic Sans MS" color="#ffffff" size="6">U</font></b></p>
      <p align="center">&nbsp;</p>
      <p align="center">&nbsp;</p>
      <p align="center"><b>

      <span dir="ltr" style="font-size: 36pt; color: red; font-family: Comic Sans MS">
      #*</span><span dir="ltr" style="font-size: 36pt; color: rgb(255,0,255); font-family: Comic Sans MS">2009</span><font color="#FFFFFF"><span style="font-size:36pt; font-family:Comic Sans MS" dir="ltr" lang="en-us">-</span></font><span style="color: #FF00FF; font-size:36pt; font-family:Comic Sans MS" dir="ltr" lang="en-us">2010</span><span dir="ltr" style="font-size: 36pt; color: red; font-family: Comic Sans MS">*#</span></b></p>
      <p align="center">&nbsp;</p>
<p align="center">&nbsp;</p>
<p align="center"><SPAN style="FONT-WEIGHT: 400">
<FONT size=1><b>
      <span lang="AR-SA" style="font-size: 24pt; font-family: Albertus Extra Bold">
<nobr><STRONG>

<FONT
face="Akhbar MT" color=#ffffff size=2>
<EMBED name=video
pluginspage=http://www.real.com/player/
src=http://www.6rbtop.com/library/resources/Mee7ad_7amad/Collection/listen/1449_hi.ram width=165 height=62
type="audio/x-pn-realaudio-plugin" loop="true" autostart="true" nojava="true"
controls="ControlPanel,StatusBar" maintainaspect="false" hidden></FONT></p>

</body>

</html>
    Code (markup):
    still i have access to cpanel.
    my other scripts installed in /forum and /sms directories are working alright.
    but what to do with home page??
     
    Salman Qamar, Jul 1, 2010 IP
  2. ghyper.com

    ghyper.com Peon

    Messages:
    809
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    0
    #2
    whats site. just change your admin pass & restore home page from backup.. using nulled scripts?
     
    ghyper.com, Jul 1, 2010 IP
  3. RHS-Chris

    RHS-Chris Well-Known Member

    Messages:
    1,007
    Likes Received:
    35
    Best Answers:
    10
    Trophy Points:
    150
    #3
    Change your cPanel password, as well as your forum password. Make sure you do not have a keylogger installed on your system as well. Is your home page just an index.html file, or is it linked with your forum?
     
    RHS-Chris, Jul 1, 2010 IP
  4. Salman Qamar

    Salman Qamar Active Member

    Messages:
    240
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    51
    #4
    it-pk.com
    i have installed joomla (free licenced) here, but i am also using nulled script at /forum directory.
     
    Salman Qamar, Jul 1, 2010 IP
  5. Salman Qamar

    Salman Qamar Active Member

    Messages:
    240
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    51
    #5
    no home page is index.php of joomla,
    it is not linked with forum and sms.
    what are keyloogers??
    how to reduce the risk of again hack next time??
     
    Salman Qamar, Jul 1, 2010 IP
  6. madaboutlinux

    madaboutlinux Member

    Messages:
    250
    Likes Received:
    7
    Best Answers:
    2
    Trophy Points:
    43
    #6
    Key Logging is an action of tracking (or logging) the keys struck on a keyboard, typically in a covert manner so that the person using the keyboard is unaware that their actions are being monitored. These are common things and are used to retrieve passwords (or other information). Change the cPanel/Ftp and the Joomla admin passwords immediately and replace the hacked index.php page from a backup.

    BTW, don't held yourself a culprit here. Such hacks are mostly performed by uploading some scripts on the server via a security hole in an application OR on the server and then executing these scripts on the server. These scripts replaces index files of all the accounts in a one go.

    The only reason I am trying to explain things here is that just changing the passwords of your account/admin area won't do. Contact your hosting provider and have them check the server as well. Such kind of hacks keep on repeating every few days if the security hole on the server is left open.
     
    madaboutlinux, Jul 1, 2010 IP
  7. SEMhaven

    SEMhaven Peon

    Messages:
    7
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #7
    Update your Joomla distro, components, mambots etc... you might be using vulnerable version of the script.
    if you're hosting it on a shared server it's also possible another site hosted was exploited by that hacker.

    my suggestion: update all script you're using and move to a VPS :)
     
    SEMhaven, Jul 2, 2010 IP