Site Hacked and adsense PUB-ID changed

Discussion in 'Legal Issues' started by amitpatel_3001, Apr 20, 2006.

  1. #1
    I was not in my city and i never checked my adsense details, when i was just checking my directory today at www.hiifii.com/dir i saw "advertise on my site" which i never activated.
    This showed me that my pub-id was changed and also in my forum www.hiifii.com/forums i see my adsnese pub-id is changed.

    Now i can change it back to mine, but what to do for that guy who did it.
    I know him as a chat friend from this link who used to ask me some help on how to install forums and all.
    I never gave him my site logins ie Ftp and all
    https://adwords.google.com/select/O...ingUrl=http://www.hiifii.com/dir/&hl=en&gl=IN
    From this i see he is Ishabhai J. Manjothi

    Now i want all your suggestion on how to handle this situation.
    i will change my ftp logins now, but what about the loss i made and the cheating he did.
    How can he hack my site first of all. :eek:

    I didnt lose much from adsense ~ 25-30$ but still what about the cheating.

    Please suggest me.

    This is my other site www.worldranking.info where my original pub-id is located.
     
    amitpatel_3001, Apr 20, 2006 IP
  2. westhaven

    westhaven Well-Known Member

    Messages:
    3,936
    Likes Received:
    452
    Best Answers:
    0
    Trophy Points:
    195
    #2
    damn it how is this possible? u must have given your ftp acces to someone. Infact i faced prob in one of my dir last week.....i got to know a pending featured listing in my admin area of phplinkdir script and i didn't get the payment for it. Thats so funny of that script.
     
    westhaven, Apr 20, 2006 IP
  3. amitpatel_3001

    amitpatel_3001 Results Follow Patience

    Messages:
    14,074
    Likes Received:
    1,178
    Best Answers:
    0
    Trophy Points:
    430
    #3
    I also get many links in my dir where they didnt pay but link comes in my admin CP :(

    But i never gave my hiifii site login's ever to anyone.

    Just found he is a member of my forum -
    http://www.hiifii.com/forums/profile.php?mode=viewprofile&u=460

    and owns this site
    maffat.com

    Now whats the option i can do please tell me, so that he never does this type of cheating again. :(
     
    amitpatel_3001, Apr 20, 2006 IP
    maldives likes this.
  4. poseidon

    poseidon Banned

    Messages:
    4,356
    Likes Received:
    246
    Best Answers:
    0
    Trophy Points:
    0
    #4
    darn :mad: ..
    I am sure that he doesn't know how to install daemon scripts so you can be assured that after changing your password he won't be able to access it. Also check the log file to see all the actions.
     
    poseidon, Apr 20, 2006 IP
  5. maldives

    maldives Prominent Member

    Messages:
    7,187
    Likes Received:
    902
    Best Answers:
    0
    Trophy Points:
    310
    #5
    Amit, directly contact him and make your point clear. Try to find out how he got your ftp details and make sure you don't do the same mistake again.

    In the meantime please change your ftp details a.s.ap ;)
     
    maldives, Apr 20, 2006 IP
  6. amitpatel_3001

    amitpatel_3001 Results Follow Patience

    Messages:
    14,074
    Likes Received:
    1,178
    Best Answers:
    0
    Trophy Points:
    430
    #6
    Changed the ftp instantly.
    But whats the use of contacting him?
    is there any other procedure?
     
    amitpatel_3001, Apr 20, 2006 IP
  7. maldives

    maldives Prominent Member

    Messages:
    7,187
    Likes Received:
    902
    Best Answers:
    0
    Trophy Points:
    310
    #7
    Contacting him is vital to obtain how he got your ftp details :eek: to avoid frustration again :eek: :eek: :eek:
     
    maldives, Apr 20, 2006 IP
  8. Edz

    Edz Peon

    Messages:
    1,690
    Likes Received:
    72
    Best Answers:
    0
    Trophy Points:
    0
    #8
    He got your system trojaned or installed a keylogger through IM. That's how he got your ftp account details!
    A plausible explanation.

    Do a full system format and install everything over again. And be carefull who you chat with.
    Be sure to use maximum security for your system and don't rely on freeware since this isn't sufficient no matter how much other people say it's just as good or whatever.

    Don't rely on AVG since this is garbage. And don't think if you have Spybot or Ad-Aware from Lavasoft installed you have a decent form of protection.

    An interesting article about Ad-Aware that describes the lack of a checksum for the signature files which gives malware an open door to install it's own code and not to be detected.

    So if you want to prevent this in the future delete videos you get in your email and don't open them unless it's from a very trusted source and if it's important.
    If it's not important then don't open it!
    You never know what's going to be installed on your system if you do so.

    Buy some decent protection for your system.
    Don't chat with anyone you don't know or you only know recently, be carefull with this kind of communication.
     
    Edz, Apr 20, 2006 IP
    e10 likes this.
  9. amitpatel_3001

    amitpatel_3001 Results Follow Patience

    Messages:
    14,074
    Likes Received:
    1,178
    Best Answers:
    0
    Trophy Points:
    430
    #9
    ok, will do that.
    Thanks.
    But he also got a adsense account on my website URL, so any option i can do with adsense support?


    Thanks a lot Edz
    I think you are right, as i met him recently on YM and iam not on my system as iam not in my city.
    So he may have keylogged my PC.
    The last time i talked to him he was asking me whether i was interested to buy Yahoo bots.
    Which i said no and he would have done the work.
     
    amitpatel_3001, Apr 20, 2006 IP
  10. Edz

    Edz Peon

    Messages:
    1,690
    Likes Received:
    72
    Best Answers:
    0
    Trophy Points:
    0
    #10
    Well he has his pub id placed on your site, ok that's not a real big problem.
    Inform Google about your situation about how your system was comprimised and tell them you have changed your passwords and formatted your system.

    In the case of him doing click fraud on your site it will only get his account suspended and maybe yours as well but therefor you need to contact Google Adsense support about this issue.

    Make sure you change all your passwords as soon as possible.

    And of course remove the AS code he placed on your site and also check your directories for possible hidden files otherwise he might be able to comprimise your system again :(
     
    Edz, Apr 20, 2006 IP
    poseidon likes this.
  11. tomecki

    tomecki Peon

    Messages:
    369
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    0
    #11
    It must be trojan. You should re-install your system as fast as possible!
     
    tomecki, Apr 20, 2006 IP
  12. doga

    doga Well-Known Member

    Messages:
    822
    Likes Received:
    29
    Best Answers:
    0
    Trophy Points:
    148
    #12
    Sorry to know it happen with you. its not easy to take details from your own PC unless or until you are not using any anti virus or you are using your machine carelessly.
    just few more addon precautions you can take. check your phpbb script is up2date or not. its always good to have up2date scripts as there is always some exploict in older version of scripts and same for your link directory.

    Also check through ftp and short by date/time to see which dates files are modified and if you found recent dates open those files and check if there is any vurenable scripts specially in phpbb forum.

    i am telling you this cause if he has changed the things through ftp then its fine and you are safe but if it happens through script it can happen again. i have seen such cases a lot with many of my clients
     
    doga, Apr 20, 2006 IP
  13. vishwaa

    vishwaa Well-Known Member

    Messages:
    271
    Likes Received:
    12
    Best Answers:
    0
    Trophy Points:
    138
    #13
    still i can see the new pub-id in your hiifii site. haven't you changed the id yet?
     
    vishwaa, Apr 20, 2006 IP
  14. amitpatel_3001

    amitpatel_3001 Results Follow Patience

    Messages:
    14,074
    Likes Received:
    1,178
    Best Answers:
    0
    Trophy Points:
    430
    #14
    No i didn't do that.
    I have mailed adsense support about this as he got his account on my URL.
    so, lets hope a positive reply from them.
    i didnt remove his adsense bcos of that reason.
     
    amitpatel_3001, Apr 20, 2006 IP
  15. Edz

    Edz Peon

    Messages:
    1,690
    Likes Received:
    72
    Best Answers:
    0
    Trophy Points:
    0
    #15
    You should remove it right now ;)
    No need to wait.

    If any wrong doing has been caused they (google) surely can filter this out.
    Just remove it why let him even make any possible profit?
     
    Edz, Apr 20, 2006 IP
  16. Mr Crow

    Mr Crow Peon

    Messages:
    1,099
    Likes Received:
    77
    Best Answers:
    0
    Trophy Points:
    0
    #16
    A good way to find out if you have any keyloggers on your system for free is to use www.housecall.trendmicro.com

    It Works and its free , even removes them ...
     
    Mr Crow, Apr 20, 2006 IP
  17. ahkip

    ahkip Prominent Member

    Messages:
    9,205
    Likes Received:
    647
    Best Answers:
    0
    Trophy Points:
    310
    #17
    That's the so dumb....it is too easy to trace that hacker down because of the pub ID..
    it just like someone stole a car and put his own license plate on...
     
    ahkip, Apr 20, 2006 IP
  18. ahkip

    ahkip Prominent Member

    Messages:
    9,205
    Likes Received:
    647
    Best Answers:
    0
    Trophy Points:
    310
    #18
    Mr crow the link doesn't work, would you please put it up again, many thx

     
    ahkip, Apr 20, 2006 IP
  19. vishwaa

    vishwaa Well-Known Member

    Messages:
    271
    Likes Received:
    12
    Best Answers:
    0
    Trophy Points:
    138
  20. Mr Crow

    Mr Crow Peon

    Messages:
    1,099
    Likes Received:
    77
    Best Answers:
    0
    Trophy Points:
    0
    #20
    Thanks Vishwaa

    I encourage everyone to run that , you will be shocked whats on your system that alot of the paid ones like Norton , Macafee and all the rest of the paid ones do not catch
     
    Mr Crow, Apr 20, 2006 IP