Site Hacked

My site was hacked and my admin login was deleted. I searched for instructions on how to get a new admin on this iste and it says to create a new user, then change the role from 1 to 3. I tried to create a new user and the join page is not allowing me to create a new user. I keep getting the error to enter a description bit I am entering a description. I tried to change an existing membership to an admin by going to http://www.md5encryption.com/ and creating a new md5 password and changing the role from 1 to 3 but it is not letting me login. How can I get into the admin to correct things?

The hack damage is not large as far as the site goes, just some malicious code that I can remove, but the join page and th eadmin login are problems I need to correct.

Thanks,

Dan

it was our turn yesterday. we had to get a full complete re-install of a clean backup, and then lock everything out. TThey hit out server root with code which resulted in the site being suspended.

Hope you get it sorted.......

Nathan

 dan,

in looking at what you have tried, seems the only thing that went wrong for you was where you tried to create your own MD5. this does not work because of the $ALT encryption.

 if you have a username: then you can run the following on the database:

UPDATE `Profiles` SET `Salt` = CONV(FLOOR(RAND()*99999999999999), 10, 36) WHERE `ID`='1';

UPDATE `Profiles` SET `Password` = SHA1(CONCAT(md5('New Admin Password'), `Salt`)) WHERE `ID`='1';

substituting what is bolded in red with your userID and desired password, respectively.

If you have a backup of your site, you could try making another backup and then comparing both copies using a program called "DiffMerge". It compares files/folders and will provide you with a list of new files/folders and files that have been modified. When opening modified files it opens both copies of the file and any differences within the files will show up in red. There is also a button you can click to jump to the next difference.

I'm not sure it will work but it's worth a try.

Good luck!