jmason Posted December 18, 2008 Share Posted December 18, 2008 I recently lost my checkout. All of my payment modules no longer appear in my admin. From what I can tell the files are in place but I can't turn on the modules. My site was completely functional a couple weeks ago. I also thing some of my content could have been rearranged. The "powered by oscommerce" no longer appears. I also show "You are not protected by a secure SSL connection" in my admin control panel. I haven't worked on my my site in moons, so please use laymen terms as I'm not too good with the code. I also forgot to mention that in the admin panel where you put your store name I have removed some jibberish about yahoo. I removed it twice and I don't use yahoo for anything. forgot this www.yankeewarehouse.net Thank you, John Link to comment Share on other sites More sharing options...
patrick77550 Posted December 18, 2008 Share Posted December 18, 2008 ... I also forgot to mention that in the admin panel where you put your store name I have removed some jibberish about yahoo. I removed it twice and I don't use yahoo for anything. forgot this www.yankeewarehouse.net Thank you, John Yes Also check your store name in the configuration table (dbf). you have been hacked by this creten (don't think i can call him what he is on here) inetnum: 78.110.175.0 - 78.110.175.255 netname: LIMIT-SUREHOST-IP-1 descr: LIMIT SUREHOST IP RANGE 1 country: RU admin-c: AAS188-RIPE tech-c: AAS188-RIPE status: ASSIGNED PA "status:" definitions mnt-by: UKSERVERS-MNT source: RIPE # Filtered person: Alexander A Solovyov address: LIMT Group Ltd. address: Karpinskogo 97a address: Moscow address: 111423 address: Russian Federation phone: +7 342 2763167 If you do a hex to ascii conversion of the jibberish you'll see one of his ip's likely 78.110.175.21 Who is your web host? Patrick Link to comment Share on other sites More sharing options...
patrick77550 Posted December 18, 2008 Share Posted December 18, 2008 also if you check i think you'll find the owenership of your files is now httpd:httpd instead of you. delete them and reload your original files, especially all index.php and login.php as soon as i beat his hack i will post, have not found a solution on here. Link to comment Share on other sites More sharing options...
jmason Posted December 18, 2008 Author Share Posted December 18, 2008 My server host is open transfer.com and database is hostexcellence.com I'm apparently screwed because I don't have a full back up. I just got through a catastrophic failure on the machine I had the back up on. Then this happened less than a week later. When it rains, it pours! It has been years since i've hung out on this site. Are there any trustworthy go to companies or people who could help me? Link to comment Share on other sites More sharing options...
New 
Recommended Posts
Archived
This topic is now archived and is closed to further replies.