Urgent - Just hacked

**htmlmaster** · 02-25-2007, 06:37 PM

OK, my site was just hacked. Luckily, the hacker was pretty retarded (so I thought) and I fixed up the problems almost instantly.

However, as a security precaution, I decided to change my cpanel password and...

Quote:

There was an error manipulating the password file.

Could someone explain how to fix this?

**Brandon Sheley** · 02-25-2007, 06:44 PM

I don't use cPanel anymore, but do you have to put the old pass in, and then the new pass twice..

did you maybe put the wrong old pass in ? or not type the new one 2 times correctly ?

**htmlmaster** · 02-25-2007, 06:46 PM

I double checked it a billion times, I'm positive I'm doing that right. To be more specific, I'm looking to see what file might have been deleted (I have a hunch the hacker was in the Control Panel and might have some-how stopped me from editing the password).

P.S. I sent a support ticket to Cpanel.

**Brandon Sheley** · 02-25-2007, 06:47 PM

I'd send a ticket to your Host, not cPanel..

You can view the last visitors in cPanel

**htmlmaster** · 02-25-2007, 06:59 PM

Alright, it's getting worse - I think this guy changed my administrative password for the forums.

Edit: Ahh, I see. He deleted my account on the forum... wonderful.

Edit again: call me crazy, but I'm starting to enjoy this. It's a cat and mouse game of changing passwords. This guy's going to get tired of me really fast.

**Brandon Sheley** · 02-25-2007, 07:42 PM

you might have a keylogger

**Ryan** · 02-25-2007, 08:17 PM

Have you solved everything?

If not, reply here...I'll be around to help out for a while.

**htmlmaster** · 02-25-2007, 08:38 PM

OK, I hacked the site back

I think it's under control, but I want to be absolutely sure.

Quote:

you might have a keylogger

Nice point, I definitely shouldn't rule that out. Any advice on finding/deleting a keylogger if I have one?

**Ryan** · 02-25-2007, 08:48 PM

Hopefully you have antivirus and spyware software installed on your computer. If so, run them.

That will get most keyloggers, but not all of them...If you suspect that you may still have one after running, there is software out there made specifically to detect keyloggers, but I haven't used them enough to give you a recommendation.

**Ashley** · 02-25-2007, 08:58 PM

Also run a good firewall [if you use a router it's likely you already have one]. A firewall will block [and also notify you of] data going out of your computer that you have not approved.

02-25-2007, 06:44 PM	#2
Brandon Sheley Super Moderator Join Date: Nov 2005 Location: Topeka, KS Posts: 1,739	I don't use cPanel anymore, but do you have to put the old pass in, and then the new pass twice.. did you maybe put the wrong old pass in ? or not type the new one 2 times correctly ? __________________ How to be To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. & Comparing To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. . Check out my blog , it's a DOFOLLOW blog, go comment! To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. Are you on Twitter? To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

02-25-2007, 06:46 PM	#3
htmlmaster Veteran Join Date: Oct 2005 Posts: 652	I double checked it a billion times, I'm positive I'm doing that right. To be more specific, I'm looking to see what file might have been deleted (I have a hunch the hacker was in the Control Panel and might have some-how stopped me from editing the password). P.S. I sent a support ticket to Cpanel. __________________ To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

02-25-2007, 06:47 PM	#4
Brandon Sheley Super Moderator Join Date: Nov 2005 Location: Topeka, KS Posts: 1,739	I'd send a ticket to your Host, not cPanel.. You can view the last visitors in cPanel __________________ How to be To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. & Comparing To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. . Check out my blog , it's a DOFOLLOW blog, go comment! To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. Are you on Twitter? To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

02-25-2007, 06:59 PM	#5
htmlmaster Veteran Join Date: Oct 2005 Posts: 652	Alright, it's getting worse - I think this guy changed my administrative password for the forums. Edit: Ahh, I see. He deleted my account on the forum... wonderful. Edit again: call me crazy, but I'm starting to enjoy this. It's a cat and mouse game of changing passwords. This guy's going to get tired of me really fast. __________________ To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

02-25-2007, 07:42 PM	#6
Brandon Sheley Super Moderator Join Date: Nov 2005 Location: Topeka, KS Posts: 1,739	you might have a keylogger __________________ How to be To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. & Comparing To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. . Check out my blog , it's a DOFOLLOW blog, go comment! To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. Are you on Twitter? To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

02-25-2007, 08:17 PM	#7
Ryan Forum Guru Join Date: Sep 2005 Location: Athens, GA Posts: 10,256	Have you solved everything? If not, reply here...I'll be around to help out for a while. __________________ To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. - Professional vBulletin Skins

02-25-2007, 08:48 PM	#9
Ryan Forum Guru Join Date: Sep 2005 Location: Athens, GA Posts: 10,256	Hopefully you have antivirus and spyware software installed on your computer. If so, run them. That will get most keyloggers, but not all of them...If you suspect that you may still have one after running, there is software out there made specifically to detect keyloggers, but I haven't used them enough to give you a recommendation. __________________ To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. - Professional vBulletin Skins

02-25-2007, 08:58 PM	#10
Ashley ... Join Date: Jan 2006 Location: Devon, United Kingdom Posts: 1,017	Also run a good firewall [if you use a router it's likely you already have one]. A firewall will block [and also notify you of] data going out of your computer that you have not approved. __________________ To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Hacked? Oh most certainly	Anon	Security and Legal Issues	16	08-28-2006 01:35 AM
Have you been hacked?	psking	Handling Problem Members	18	06-25-2006 11:52 PM
Hacked!	oninuva	Security and Legal Issues	13	06-20-2006 11:09 PM
Enthonia Network Forums Hacked :(	sanka	vBulletin	25	12-26-2005 04:28 PM