(read first) If your site hacked

Nuke Cadet Joined: Jul 19, 2006 Posts: 1

Another newb question. I have read through pretty much all of this topic and the more I read the more confused I got. I have managed to get rid of the extra admin and rename my site but I don't know where to go now to fix the rest.

There is an overlaying image or some thing that I have no idea on how to remove.

http://www.ausubaru.com/main/index.php

Where do I go from here?

Site Admin Joined: Jun 18, 2004 Posts: 208

few places to check there some kind of redirect either header: or meta

check index.php, header.php or meta.php if they got your ftp

if not then check admin->news and admin->blocks or admin->messages and delete what they did

thanks

Steve Wink

Nuke Cadet Joined: Oct 03, 2006 Posts: 2

I have a new client that is running either phbb or php-nuke and there was a link to this site on the bottom of his hacked page.

I need to know exactly what he is running, and if there is a more secure or updated version I can upgrade him to. Also, it looks like a CSS layer was added as a hack to the board, help.

Thanks!

Here is the URL in question:

http://www.thefragrantlemonpeel.com/forum/html/

Private Joined: Oct 08, 2005 Posts: 43 Location: York UK

nope the hacker just did a known exploit and got admin of the forum and changed sum footer details. thats easy to get rid of. As for patching i dont think he will have the latest version.