Page Index Toggle Pages: 1
Topic Tools
Normal Topic Got hacked and now I am redirecting to some russian website: (Read 1,680 times)
Dandello
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Online



Posts: 2,202
Location: Earth

YaBB 2.6.0
Re: Got hacked and now I am redirecting to some russian website:
Reply #3 - Jan 17th, 2013 at 8:08pm
Post Tools
How it got there, I have no idea except that there was a breach of security that let it happen. Changing your hosting access passwords and ftp passwords is in order (as well as making sure there aren't any ftp accounts you don't recognize attached to your account).

Sending a note to your hosting service's tech support wouldn't hurt either.
  

If you only have one solution to a problem you're not trying hard enough!
Back to top
WWW  
IP Logged
 
Websnail
YaBB Newcomer
*
Offline



Posts: 8

YaBB 2.4
Re: Got hacked and now I am redirecting to some russian website:
Reply #2 - Jan 17th, 2013 at 7:59pm
Post Tools
This makes a lot of sense and I already found .htaccess that contains this evil staff. Its under public_html. Question. How did it get there and what do I need to do to keep the hackers from putting it there again?

Thanks so much for the quick answer!
  
Back to top
 
IP Logged
 
Dandello
YaBB Administrator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Online



Posts: 2,202
Location: Earth

YaBB 2.6.0
Re: Got hacked and now I am redirecting to some russian website:
Reply #1 - Jan 17th, 2013 at 7:38pm
Post Tools
Chances are that your files on the server are intact but an .haccess file or an index file has been hacked (or possibly maybe something else on your host) that is redirecting traffic away from where it's suppose to go.) Check for index or default files in the various folders for your site - especially recently edited ones.
  

If you only have one solution to a problem you're not trying hard enough!
Back to top
WWW  
IP Logged
 
Websnail
YaBB Newcomer
*
Offline



Posts: 8

YaBB 2.4
Got hacked and now I am redirecting to some russian website:
Jan 17th, 2013 at 6:58pm
Post Tools
on my forum

http://www.reenactorforum.waszmann.de/cgi-bin/yabb2/YaBB.pl

there is something going on. Today when I openend the forum I got a virus warning saying Address has been blocked http://mediciron.ru ip: 84.22.127.37

Were can I find this redirecotr in the code of the YABB. I tried to find it in the templates but could not. Also the website looks like its destroyed, my yellow background gone and pictures of buttons missing. Please help. What do I need to do to fix this?

  
Back to top
 
IP Logged
 
Page Index Toggle Pages: 1
Topic Tools
 
  « Board Index ‹ Board  ^Top