Posts Tagged problem

How I restored my WordPress blog hacked by the Tunisian Hacker

I was shocked to find this afternoon that this blog was hacked! The home page was displaying the following lines with rock music playing in the background:

HacKeD By RAMZI NULL
Im Not Afraid , Because I’am Tunisian HaCKeR
Facebook ID : www.facebook.com/Ramzi.Pascal
Greetz to : Mohamed 0wNeR & All TuNiSiEN
Hotmail ID : ramzi.pascal@hotmail.fr

I spent a few hours trying to get it restored and I am reporting here what the hacker did to my blog and how I fixed the problem – hope it helps you restore your blog to normal too.

As soon as I found about this problem, I tried to change my admin login password but only to find that I could not do that! I did use the blog’s built-in feature to send me a link so that I could click and reset the password. For this I received all the emails I requested but whenever I tried to enter a new password to reset it, the blog gave me a “page not found” error. So basically I could not login as admin by resetting the password.

Then I downloaded a copy of wp-config.php to my computer via FTP and then changed the Authentication Unique Keys in it using the WordPress.com secret-key service located here – I learned from Googling that this will disable the cache and cookie on the hacker’s side immediately. This is the first thing that I should have done in the first place.

Having done that, I logged into my site’s cPanel and checked a few things around. What I found using phpMyAdmin in the MySQL database was that the hacker had added himself (ramzi) as a admin and changed me, the real admin, to a status that had a value of 0 for “user_status”!

I immediately removed this user from phpMyAdmin. After searching for user’s post by “ramzi”, I found none which means the hacker did not add any posts to the blog. Nevertheless, removing the hacker admin account did not solve the problem – the homepage still displayed his hacker page!

Then I suspected that the hacker must have done something to the theme files. So I removed the themes folder completely and then downloaded the theme file fresh and uploaded to the server - that fixed the hacked homepage!

By then only one problem remained – I could not log in as admin at all! Changing the value for “user_status” from 0 to 1 via phpMyAdmin did not help at all.

Initially I thought the hacker had tampered with files in the wp-admin folder. So I removed the wp-admin folder completely and then uploaded fresh content for that folder out of the newly downloaded WordPress zip file – no, that did not solve the problem and I still could not login.

Then I searched and found this page that really helped me to reset my admin login password using phpMyAdmin – please click the link and read the detailed instructions there.

Is your WordPress hacked in a similar fashion? Hope that you can get it fixed and I would like to hear from you how you did it.

, , , , , , , , , , ,

No Comments

Get Google Earth Installed and Run in Linux Mint Debian Edition (LMDE)

get Google Earth run in Linux Mint Debian Edition - LMDEAs indicated in my earlier post here, Linux Mint Debian Edition (LMDE) runs much faster than Ubuntu and any other version of Linux Mint. I really really like it. However, one thing had frustrated me for almost a week: I could not get Google Earth installed and run in LMDE.

Well, later on we found that Google Earth was indeed installed but it crashed immediately after being started. I literally tried all the installation methods I could find over the internet. I even sent the Google Earth crash report to Google. None helped me solve this problem. Then I saw someone on the Linux Mint forum mentioned about the 3D GLX Renderer issue – Google Earth needs a 3D video driver to display things properly. The command to see if the GLX Renderer is working is this command on the Linux terminal:

inxi -G

My output before Google Earth was working was this:

Graphics: Card ATI RS480 [Radeon Xpress 200G Series] X.Org 1.7.7 Res: 1360×768@60.0hz
GLX Renderer N/A GLX Version N/A

So this means that the GLX Renderer is not working at all. This is why I could not run Google Earth on LMDE and why it crashed right away after being started. THE SOLUTION?

Very simple… just use Synapitc to install a package called “libgl1-mesa-dri” – just that, nothing more! Remember to reboot your machine after installing “libgl1-mesa-dri”

If you have not installed Google Earth at all, install the “libgl1-mesa-dri” package first using Synaptic and then use the following commands to install Google Earth:

sudo apt-get install googleearth-package
sudo make-googleearth-package --force
ls (see see the exact filename for the .deb file created)
sudo dpkg -i --force-architecture googleearth_x.x.xxxx.xxxx.deb (use the exact filename)
googleearth (if you see it running, then success!)

Viola! Google Earth should run in LMDE without any problem :-)

, , , , , , , , , , , ,

4 Comments

Switch to our mobile site