my vbulletin forum site is hacked

Discussion in 'Security' started by Salman Qamar, Jul 24, 2010.

  1. #1
    My vbulletin forum site is hacked.
    the page is showing following message



    HACKED BY DR.THMOORY TEAM

    ][NOT STOP HACKING][

    VIVA DR.THMOORY TEAM

    DR.THMOORY



    Mahmoud Labana






    The code of the page is

    <br />
    <b>Warning</b>:  require(/home/itpk/public_html/forum.php) [<a href='function.require'>function.require</a>]: failed to open stream: Permission denied in <b>/home/itpk/public_html/vbseo.php</b> on line <b>1382</b><br />
    <br />
    <b>Warning</b>:  require(/home/itpk/public_html/forum.php) [<a href='function.require'>function.require</a>]: failed to open stream: Permission denied in <b>/home/itpk/public_html/vbseo.php</b> on line <b>1382</b><br />
    <br />
    <b>Fatal error</b>:  require() [<a href='function.require'>function.require</a>]: Failed opening required '/home/itpk/public_html/forum.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in <b>/home/itpk/public_html/vbseo.php</b> on line <b>1382</b><br />
    
    Code (markup):
    i have trieed to upload fresh forum.php and index.php files but no effect.
     
    Salman Qamar, Jul 24, 2010 IP
  2. madaboutlinux

    madaboutlinux Member

    Messages:
    250
    Likes Received:
    7
    Best Answers:
    2
    Trophy Points:
    43
    #2
    They seem to have hacked your database. If you know how to go about checking the database, it's well and fine but if not, restore the database from the backup, change the passwords of the admin area, database username/password and make sure Mysql is bind to localhost and cannot be accessed remotely. If you are on a Shared server, have your hosting provider check the server side logs to make sure the server is not hacked in anyway.
     
    madaboutlinux, Jul 25, 2010 IP
  3. Salman Qamar

    Salman Qamar Active Member

    Messages:
    240
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    51
    #3
    Thanks i have upgraded to vbulletion 4.0.5
     
    Salman Qamar, Jul 25, 2010 IP