Remove old threads to stop hackers

[ellis200200]

Hi All

is there any way i can remove old threads from the forum.
I have been working on my site for 5 months and it was hacked this morning and they left some nasty virus's.
Unfortunately the only place the URL is available is on this forum so i would like to remove these threads if possible.
It's a shame as the zen cart team and other forum users have been a very helpful in the development of my store
So if anyone knows how to remove my old threads please let me know.
Thanks.
Andy

[Ajeh]

You really want to upgrade your site if you got hacked ...

Was the hack actually done via Zen Cart code? Or via other code on your site or someone else's site on the same server that you are on?

What version Zen Cart are you running?

If not v1.3.6, have you applied all of the security fixes and patches for your old, out of date, unsecure code?

[ellis200200]

Hi Ajay

Sorry for the delay (sleep needed)

I have upgraded to v1.3.6.

i was running v 1.3.0.2 and applied the Dr's security fixes.

i contacted my server and they said its not from there end (they would though)

I'm just trying to cover all my bases as the last thing i want is to go live, soon i hope, and a potential customer to get bombarded by virus's and foul language

So i would like to remove any reference to my URL if possible

I would also like to say that I'm not having a dig at Zen cart in any way at all. I have no bad words to say about the software or support provided.

It's the mindless idiots out there have nothing better to do than try to ruin a lot of hard work done by both the person building there site and the team at Zen Cart.

Thanks
Andrew

[Website Rob]

Sorry to hear about your troubles, Andy, but it's not likely your URL will be removed from this, or any other, Forum. Don't worry too much though. Odds are you've already removed the hacked files and things are back the were they were.

When you say, "My site was hacked.", are you referring to ZenCart, phpBB, or your main site; if not one of the two mentioned? Although hackers can get in through various methods, good security on your part and especially your Hoster, can prevent many bad things from happening.

[ellis200200]

Hi Rob

Two Files were added to my admin files as index html files.

I think I have them all.

I'm hoping the security fixes in v1.3.6 will help.

It's just devastating to log on to you admin section find you have had 85 hits from fool who just wants to mess with you hard work.

I'm going to go over it again just to make sure that I got all there handy work

Thanks
Andrew

[Website Rob]

Andrew, if you are using a default install, you can safely delete "everything" in your ZenCart directories. Then you just reupload the files from your computer. That is the quickest and surest way, to get rid of any unwanted files.

If you are using a custom setup (template overrides) you should already have current backups of those files. Reuploading those should put you back to where you where before all this started.

Note: two files you should make sure you have correct backups of are:
includes/configure.php
admin/includes/configure.php

[ellis200200]

Hi All

Just been looking for how I was hacked.

It seems these people have a liking for Zen cart sites.

spygrup.org/showthread.php?t=9594

There is a list of sites they are messing with.

I have no idea what to do about this and as I seem to be written in Russian I can't make out what there about

If you’re not running a good security system don’t click on any of the links as you’re gonna get bombarded with virus’s

Anyone know what I can do about them?

Thanks
Andrew

[ellis200200]

Hi Rob
Running custom and Template overrides are backed up. Learnt that lesson the hard way
Good idea I will do that just to be sure

Thanks
Andrew

[Website Rob]

Hi All

Just been looking for how I was hacked.

It seems these people have a liking for Zen cart sites.

spygrup.org/showthread.php?t=9594

There is a list of sites they are messing with.

Good catch. Unfortunately, http://www.zencart.org/images/ seems to be one of them. Would've sent an eMail to a Contact address instead of posting it in this thread, but this site doesn't seem to have any Contact addresses?

[ellis200200]

Hi Rob

So any idea what can be done about them?

Thanks
Andy