| Author |
 Topic Search  Topic Options
|
india 
Senior Member
Joined: 21 November 2003
Status: Offline
Points: 499
|
 Post Options
 Thanks(0)
 Quote  Reply
 Topic: HACKING ATTEMPT or ?????
Posted: 23 November 2003 at 8:28am |
hi,
I need your help. plzzzzzz help me.
I have setup web wiz forums v7.6
we have two admins - jaleo and india.
the administrator account pass is changeed and nobody knows that
few minutes ago i saw that in active user list it was showing administrator with 1 minute of login. also it was showing winxp and ie6. after 10mins its not there.
plz let me know is this hacking attempt or else how did someone login to that id,
thank you 4 ur co-operation
INDIA
|
 |
india
Senior Member
Joined: 21 November 2003
Status: Offline
Points: 499
|
Post Options
Thanks(0)
Quote Reply
Posted: 23 November 2003 at 12:53pm |
help me out, guys
its urgent
now, after 5-6 hrs, it is
| administrator |
23 November 2003 at 1:35am |
23 November 2003 at 1:43am |
8 minutes |
Windows NT 4 |
Microsoft IE 5 |
wats happening
|
|
wistex
Mod Builder Group
Joined: 30 August 2003
Location: United States
Status: Offline
Points: 877
|
Post Options
Thanks(0)
Quote Reply
Posted: 23 November 2003 at 5:42pm |
Change all your admin passwords to something hard to crack.
If he has a packet sniffer, you may be able to throw him off or at least make him dig by doing the following:
- If you haven't already, create a different account with admin rights.
- Login with that account. He may not be scanning for that account's username and password.
- Go into the Administrator's profile and change the Administrator's password there.
Also, make sure that you do not have any Adware or Spyware on your computer. There are key loggers than can transmit everything you type back to the hacker, including your username and password. Get some spyware removers to scan for and get rid of these.
|
|
|
|
india
Senior Member
Joined: 21 November 2003
Status: Offline
Points: 499
|
Post Options
Thanks(0)
Quote Reply
Posted: 23 November 2003 at 9:07pm |
ok. thanks 4 the reply.
as i said 2 admins, 1 id amond them belons 2 me. admin id i changed password after 1sta attempt with winxp, after 4hrs, again ir shows with winnt. i think this is sabug.
plz check
|
|
WebWiz-Bruce
Admin Group
Web Wiz Developer
Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
|
Post Options
Thanks(0)
Quote Reply
Posted: 24 November 2003 at 8:39am |
|
The main admin account is what your main admin needs to use this account!!
You should have the minimum amount of admin accounts possible!!
Change the default password to something with number and characters.
Change the name of the admin account fom the default name!!!
Change the password for the admin account through the main forum so a new usercode is generated to prevent auto login working.
Don't believe what you see in the active users page as it is not accurate, due to the way HTTP works.
|
|
|
|
india
Senior Member
Joined: 21 November 2003
Status: Offline
Points: 499
|
Post Options
Thanks(0)
Quote Reply
Posted: 24 November 2003 at 9:11am |
 -boRg- wrote:
The main admin account is what your main admin needs to use this account!!
** i am the main admin but i use the account "india". can i delete/suspend the admin account?
You should have the minimum amount of admin accounts possible!!
** Yes, only me and more more person is admin, Nobody else.
Change the default password to something with number and characters.
** I did that
Change the name of the admin account fom the default name!!!
** How to change that?
Change the password for the admin account through the main forum so a new usercode is generated to prevent auto login working.
** How to do that?
Don't believe what you see in the active users page as it is not accurate, due to the way HTTP works.
|
My replies in ** . Thank you
|
|
india
Senior Member
Joined: 21 November 2003
Status: Offline
Points: 499
|
Post Options
Thanks(0)
Quote Reply
Posted: 24 November 2003 at 9:15am |
Borg, 1 more thing. i suspected it was a bug and i think its true because first of all, how it is possible that everytime a hacker logs on the operating system and ie version is changed?
secondly, i changed 2 times. how it is possible he guessed so easily? i think there is some limit of unsuccessful tries?
thirdly, i had downloaded the database. i disabled the admin account there. then i checked it was still showing in active user but profile was stating account disabled.
after 10mins, it did not come online. so i think its a bug
Wat do you say?
--------------------
i m using www.1asphost.com web service. i cant use brinkster bcuz my database size is abt 29-30mb. do u know any other sites 4m where i can get more than 30mb space and asp support.
secondly, in 1asphost, can u plz let me know whether the directories are protected or not since i read some message on forum to keep database in a unwriteable folder. but if thats the case, how will it work?
plz read http://forums.webwiz.net/forum_posts.asp?TID=7460&am p;am p;PN=2
thank you
|
|
WebWiz-Bruce
Admin Group
Web Wiz Developer
Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
|
Post Options
Thanks(0)
Quote Reply
Posted: 24 November 2003 at 9:26am |
|
Never delete or disable the main admin account. Your forum will be UNSTABLE if you mess with this account.
Certain features are only availbale through this account.
Don't create a new admin account for the person in charge of the forum,
always use the built in admin account changing the username and
password for this account.
|
|
|
|
