Forum Hacked. Admin Team Disabled.

[Satoascorpion]

This user has been denied support.

The security of my forum ( <snip> ) has been compromised somehow.

Every single Admin except one has been banned, with the reason being... offensive to say here. The only one not banned had his login information changed. This is obviously the hacker's choice of entry.

I am the webmaster. If someone will help me regain control of my site, I would -infinitely- appreciate it.

I am willing to provide any and all information to validate my claim.

Please assist us.

[un4saken]

Do you have phpmyadmin access?

[Satoascorpion]

This user has been denied support.

I'm completely banned. I can't even access the site.

EDIT: I'm an idiot. I was thinking you were talking about the Admin CP.

I should have access to the cPanel, yes.

[un4saken]

It is not related to the mybb forum, it is your hosting panel where you manage your mysql databases.

[Satoascorpion]

This user has been denied support.

Yes, I do have access to the hosting service. This wasn't compromised at all. I did a very good job locking it up behind secure passwords only I know.

What do I do next?

[un4saken]

Login to your mysql database management panel and find mybb_banned table. Remove the line begining with your UID from there. Then you can be able to login to your forum. If your password has changed, find mybb_users table, change your password to

fdd213df5f773593c282a12fe4467527

which is

123456

then you will be able to login to your admin panel. Check moderator logs to see which account has been used to ban admins. When you find the compromised account, just revoke his powers.

[Satoascorpion]

This user has been denied support.

I couldn't directly connect, but I'm attempting to reload the MYSQL Database, from a restore point created 17 hours ago.

---

Wait, I'm actually logged into it now. But I can't find mybb_banned.

---

I believe things are the way they should be, however if you look at the webpage...

www.ff6hacking.com

How do I correct this?

[Krytic]

Check your MySQL password against the one stored in inc/config.php. Do they match?

[Satoascorpion]

This user has been denied support.

Check your MySQL password against the one stored in inc/config.php. Do they match?

...this all happened right when I changed the MYSQL password...

Forgive me, this is my first time doing -any- of this. I can't ask my co-admins for help on this matter, so it's all me.

That is exactly what the problem was. Thank you both SO much for assisting us on this matter.