https://www.icyphoenix.com/viewtopic.php?f=35&t=336&p=2859#p2859
-----------------------------------
MajickDev
Thu 14 Sep, 2006 03:37

Re: Cannot Enter ACP From Tonight!!!
-----------------------------------
Hi everyone,

2 of my XS's were hacked yesterday. 1 of them was a disabled XS that I haven't used for some time, had the MOCKS listening device successfully installed: /album_mod/upload/mocks-0.0.2/mocks listening on *:10080:

My web host (1and1) notified me. Later on, my main XS had the index page changed to a message with a bunch of nonsense, ending with "Sorry Mr. Admin, your security has been hacked."

I deleted the MOCKS listening files, re-uploaded my index.php, changed all passwords. My host won't allow me to shut off Globals. Today my index page was changed again.

I'm still new to php, can anyone help me to stop this from happening again? What other files should I look for?

Please help, I have a very angry red-headed wife with a bad attitude who is not happy that her board has been compromised!


