Quick Login   
 
Register AdminFusion Tutorials
 
Featured Sponsors


One.com Domain and Hosting


Register
Forum of the Month
Australian Webmaster
fotm

A webmaster forum specifically catering for Australian site owners. We discuss site development, marketing and management issues.

Tag Cloud
Latest Threads
Forum Stats
7,900 Members
165,091 Posts
33 Users Online

Please welcome our newest member, Jors308932!

Affiliates
Go Back AdminFusion » Management » Security and Legal Issues » Urgent - Just hacked
Welcome to the AdminFusion. AdminFusion is the ultimate resource for forum administrators and moderators. With exclusive articles, interviews with the experts, free downloadable skins, and the revolutionary post exchange system - PostFusion, AdminFusion is the place to go for all of your forum needs.  By joining AdminFusion, you will become part of a thriving admin community and immediately gain access to all of these resources. Registration is fast, simple and absolutely free so please join us today!
Want more than our forums? Try these: Post Fusion Forum Matrix
Old 02-25-2007, 07:37 PM   #1

htmlmaster's Avatar

Title: Veteran

Points: 4,793, Level: 20Points: 4,793, Level: 20Points: 4,793, Level: 20
Level up: 21%, 257 Points neededLevel up: 21%, 257 Points neededLevel up: 21%, 257 Points needed
Activity: 0%Activity: 0%Activity: 0%

Join Date: Oct 2005

Posts: 652

htmlmaster is a name known to allhtmlmaster is a name known to allhtmlmaster is a name known to allhtmlmaster is a name known to allhtmlmaster is a name known to allhtmlmaster is a name known to all
 
 
Urgent - Just hacked

OK, my site was just hacked. Luckily, the hacker was pretty retarded (so I thought) and I fixed up the problems almost instantly.

However, as a security precaution, I decided to change my cpanel password and...
Quote:
There was an error manipulating the password file.
Could someone explain how to fix this?
Reply With Quote
Old 02-25-2007, 07:44 PM   #2

loco.m's Avatar

Title: Super Moderator

Points: 10,958, Level: 31Points: 10,958, Level: 31Points: 10,958, Level: 31
Level up: 32%, 292 Points neededLevel up: 32%, 292 Points neededLevel up: 32%, 292 Points needed
Activity: 28%Activity: 28%Activity: 28%

Join Date: Nov 2005

Posts: 1,615

Location: vBulletinSetup

loco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond repute

Send a message via AIM to loco.m Send a message via MSN to loco.m Send a message via Yahoo to loco.m  
 
I don't use cPanel anymore, but do you have to put the old pass in, and then the new pass twice..

did you maybe put the wrong old pass in ? or not type the new one 2 times correctly ?
Reply With Quote
Old 02-25-2007, 07:46 PM   #3

htmlmaster's Avatar

Title: Veteran

Points: 4,793, Level: 20Points: 4,793, Level: 20Points: 4,793, Level: 20
Level up: 21%, 257 Points neededLevel up: 21%, 257 Points neededLevel up: 21%, 257 Points needed
Activity: 0%Activity: 0%Activity: 0%

Join Date: Oct 2005

Posts: 652

htmlmaster is a name known to allhtmlmaster is a name known to allhtmlmaster is a name known to allhtmlmaster is a name known to allhtmlmaster is a name known to allhtmlmaster is a name known to all
 
 
I double checked it a billion times, I'm positive I'm doing that right. To be more specific, I'm looking to see what file might have been deleted (I have a hunch the hacker was in the Control Panel and might have some-how stopped me from editing the password).

P.S. I sent a support ticket to Cpanel.
Reply With Quote
Old 02-25-2007, 07:47 PM   #4

loco.m's Avatar

Title: Super Moderator

Points: 10,958, Level: 31Points: 10,958, Level: 31Points: 10,958, Level: 31
Level up: 32%, 292 Points neededLevel up: 32%, 292 Points neededLevel up: 32%, 292 Points needed
Activity: 28%Activity: 28%Activity: 28%

Join Date: Nov 2005

Posts: 1,615

Location: vBulletinSetup

loco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond repute

Send a message via AIM to loco.m Send a message via MSN to loco.m Send a message via Yahoo to loco.m  
 
I'd send a ticket to your Host, not cPanel..

You can view the last visitors in cPanel
Reply With Quote
Old 02-25-2007, 07:59 PM   #5

htmlmaster's Avatar

Title: Veteran

Points: 4,793, Level: 20Points: 4,793, Level: 20Points: 4,793, Level: 20
Level up: 21%, 257 Points neededLevel up: 21%, 257 Points neededLevel up: 21%, 257 Points needed
Activity: 0%Activity: 0%Activity: 0%

Join Date: Oct 2005

Posts: 652

htmlmaster is a name known to allhtmlmaster is a name known to allhtmlmaster is a name known to allhtmlmaster is a name known to allhtmlmaster is a name known to allhtmlmaster is a name known to all
 
 
Alright, it's getting worse - I think this guy changed my administrative password for the forums.

Edit: Ahh, I see. He deleted my account on the forum... wonderful.

Edit again: call me crazy, but I'm starting to enjoy this. It's a cat and mouse game of changing passwords. This guy's going to get tired of me really fast.
Reply With Quote
Old 02-25-2007, 08:42 PM   #6

loco.m's Avatar

Title: Super Moderator

Points: 10,958, Level: 31Points: 10,958, Level: 31Points: 10,958, Level: 31
Level up: 32%, 292 Points neededLevel up: 32%, 292 Points neededLevel up: 32%, 292 Points needed
Activity: 28%Activity: 28%Activity: 28%

Join Date: Nov 2005

Posts: 1,615

Location: vBulletinSetup

loco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond reputeloco.m has a reputation beyond repute

Send a message via AIM to loco.m Send a message via MSN to loco.m Send a message via Yahoo to loco.m  
 
you might have a keylogger
Reply With Quote
Old 02-25-2007, 09:17 PM   #7

Ryan's Avatar

Title: Administrator

Points: 47,649, Level: 67Points: 47,649, Level: 67Points: 47,649, Level: 67
Level up: 68%, 701 Points neededLevel up: 68%, 701 Points neededLevel up: 68%, 701 Points needed
Activity: 0%Activity: 0%Activity: 0%

Join Date: Sep 2005

Posts: 10,246

Location: Athens, GA

Ryan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond repute
 
 
Have you solved everything?

If not, reply here...I'll be around to help out for a while.
__________________
...some super-sweet signature
Reply With Quote
Old 02-25-2007, 09:38 PM   #8

htmlmaster's Avatar

Title: Veteran

Points: 4,793, Level: 20Points: 4,793, Level: 20Points: 4,793, Level: 20
Level up: 21%, 257 Points neededLevel up: 21%, 257 Points neededLevel up: 21%, 257 Points needed
Activity: 0%Activity: 0%Activity: 0%

Join Date: Oct 2005

Posts: 652

htmlmaster is a name known to allhtmlmaster is a name known to allhtmlmaster is a name known to allhtmlmaster is a name known to allhtmlmaster is a name known to allhtmlmaster is a name known to all
 
 
OK, I hacked the site back I think it's under control, but I want to be absolutely sure.
Quote:
you might have a keylogger
Nice point, I definitely shouldn't rule that out. Any advice on finding/deleting a keylogger if I have one?
Reply With Quote
Old 02-25-2007, 09:48 PM   #9

Ryan's Avatar

Title: Administrator

Points: 47,649, Level: 67Points: 47,649, Level: 67Points: 47,649, Level: 67
Level up: 68%, 701 Points neededLevel up: 68%, 701 Points neededLevel up: 68%, 701 Points needed
Activity: 0%Activity: 0%Activity: 0%

Join Date: Sep 2005

Posts: 10,246

Location: Athens, GA

Ryan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond reputeRyan has a reputation beyond repute
 
 
Hopefully you have antivirus and spyware software installed on your computer. If so, run them.

That will get most keyloggers, but not all of them...If you suspect that you may still have one after running, there is software out there made specifically to detect keyloggers, but I haven't used them enough to give you a recommendation.
__________________
...some super-sweet signature
Reply With Quote
Old 02-25-2007, 09:58 PM   #10

Ashley's Avatar


Title: www.Centicero.com

Points: 6,754, Level: 24Points: 6,754, Level: 24Points: 6,754, Level: 24
Level up: 25%, 296 Points neededLevel up: 25%, 296 Points neededLevel up: 25%, 296 Points needed
Activity: 0%Activity: 0%Activity: 0%

Join Date: Jan 2006

Posts: 1,017

Location: Devon, United Kingdom

Ashley is a splendid one to beholdAshley is a splendid one to beholdAshley is a splendid one to beholdAshley is a splendid one to beholdAshley is a splendid one to beholdAshley is a splendid one to beholdAshley is a splendid one to beholdAshley is a splendid one to behold
Send a message via ICQ to Ashley Send a message via AIM to Ashley Send a message via MSN to Ashley Send a message via Yahoo to Ashley  
 
Also run a good firewall [if you use a router it's likely you already have one]. A firewall will block [and also notify you of] data going out of your computer that you have not approved.
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

 
Posting Rules

Similar Threads
Thread Thread Starter Forum Replies Last Post
Hacked? Oh most certainly Anon Security and Legal Issues 16 08-28-2006 02:35 AM
Have you been hacked? psking Handling Problem Members 18 06-26-2006 12:52 AM
Hacked! oninuva Security and Legal Issues 13 06-21-2006 12:09 AM
Enthonia Network Forums Hacked :( sanka vBulletin 25 12-26-2005 05:28 PM

AdminFusion

All times are GMT +1. The time now is 02:16 AM. Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.1.0 © 2005-2008 AdminFusion - All Rights Reserved