# Need assistance. V Hacker

**URL:** <https://forums.speedlife.net/t/need-assistance-v-hacker/21334>\
**Category:** NYSpeed Off Topic\
**Created:** [December 7, 2006, 8:25pm UTC](https://forums.speedlife.net/t/need-assistance-v-hacker/21334 "2006-12-07T20:25:07Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![The\_Russian](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/the_russian/32/7414_2.png) [@The\_Russian](https://forums.speedlife.net/u/The_Russian)\
**Post date:** [December 7, 2006, 8:25pm UTC](https://forums.speedlife.net/t/need-assistance-v-hacker/21334/1 "2006-12-07T20:25:07Z")

</div>

Earlier today our local airsoft forum was hacked. The Url is [www.wynal.net](http://www.wynal.net)

The information i have is little to none other than the name of the suposed hacker which was Jamaka or something like that.

so im looking for people who know there way with these types of situations and can help restore was was lost.

I know there are some very computer savvy people on here. So anything you can do to help would be fantastic.

Please no drama B.S. Its not my forum.

---

<div class="post-metadata">

**Author:** ![Bacon](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/bacon/32/7230_2.png) [@Bacon](https://forums.speedlife.net/u/Bacon)\
**Post date:** [December 7, 2006, 8:28pm UTC](https://forums.speedlife.net/t/need-assistance-v-hacker/21334/2 "2006-12-07T20:28:44Z")

</div>

Domain Name: [WYNAL.NET](http://WYNAL.NET)  
Registrar: BELGIUMDOMAINS, LLC  
Whois Server: [whois.belgiumdomains.com](http://whois.belgiumdomains.com)  
Referral URL: [http://www.belgiumdomains.com](http://www.belgiumdomains.com)  
Name Server: [NS-3.DOMAINCT.COM](http://NS-3.DOMAINCT.COM)  
Name Server: [NS-2.DOMAINCT.COM](http://NS-2.DOMAINCT.COM)  
Name Server: [NS-1.DOMAINCT.COM](http://NS-1.DOMAINCT.COM)  
Status: ACTIVE  
EPP Status: ok  
Updated Date: 05-Dec-2006  
Creation Date: 05-Dec-2006  
Expiration Date: 05-Dec-2007

It doesn’t look like it was hacked, it looks like someone forgot to renew the domain and it was snached up.

---

<div class="post-metadata">

**Author:** ![Locutus](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/locutus/32/7574_2.png) [@Locutus](https://forums.speedlife.net/u/Locutus)\
**Post date:** [December 7, 2006, 8:30pm UTC](https://forums.speedlife.net/t/need-assistance-v-hacker/21334/3 "2006-12-07T20:30:05Z")

</div>

contact [http://www.ic3.gov/](http://www.ic3.gov/)

---

<div class="post-metadata">

**Author:** ![The\_Russian](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/the_russian/32/7414_2.png) [@The\_Russian](https://forums.speedlife.net/u/The_Russian)\
**Post date:** [December 7, 2006, 8:51pm UTC](https://forums.speedlife.net/t/need-assistance-v-hacker/21334/4 "2006-12-07T20:51:09Z")

</div>

I filed a claim, but i have very limited info. Im not sure what they can do. I think its up to our Admin to attempt to fix it.

lol i was hoping someone could anti-hack but i must be smoking something good

---

<div class="post-metadata">

**Author:** ![Minglor](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/minglor/32/7373_2.png) [@Minglor](https://forums.speedlife.net/u/Minglor)\
**Post date:** [December 7, 2006, 9:18pm UTC](https://forums.speedlife.net/t/need-assistance-v-hacker/21334/5 "2006-12-07T21:18:29Z")

</div>

> [@FuzzyFish](#):
>
> It doesn’t look like it was hacked, it looks like someone forgot to renew the domain and it was snached up.

+1

---

<div class="post-metadata">

**Author:** ![RedDawg](https://avatars.discourse-cdn.com/v4/letter/r/dfb087/32.png) [@RedDawg](https://forums.speedlife.net/u/RedDawg)\
**Post date:** [December 8, 2006, 4:56am UTC](https://forums.speedlife.net/t/need-assistance-v-hacker/21334/6 "2006-12-08T04:56:43Z")

</div>

i wouldn’t mess with Jamaka, i heard he cracked the IRS d-base

---

<div class="post-metadata">

**Author:** ![buffalove](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/buffalove/32/7460_2.png) [@buffalove](https://forums.speedlife.net/u/buffalove)\
**Post date:** [December 8, 2006, 12:41pm UTC](https://forums.speedlife.net/t/need-assistance-v-hacker/21334/7 "2006-12-08T12:41:14Z")

</div>

Nothing expired, he just misspelled the url…  
[http://www.wnyal.net/](http://www.wnyal.net/)  
works fine…, seems like the site was restored.

Did he make any db backups to his own computer, the point of backups is to have them seperate from the servers drives…

Is it hosted somewhere? or is it his own server?

---

<div class="post-metadata">

**Author:** ![The\_Russian](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/the_russian/32/7414_2.png) [@The\_Russian](https://forums.speedlife.net/u/The_Russian)\
**Post date:** [December 8, 2006, 12:44pm UTC](https://forums.speedlife.net/t/need-assistance-v-hacker/21334/8 "2006-12-08T12:44:09Z")

</div>

Ok… so here is the deal…

I was hacked sometime around 3am yesterday. This was a defacing hack through a rootkit. He managed to not only flitz my entire system, but messed with the backup drive as well.

I am in the process of restoring things as fast as i can. The server was rebuilt yesterday, and the accounts are being re-created now. As soon as I am done with the process I will let everyone know.

The biggest problem is that the index files across the board were wiped… meaning I need to reinstall everything from scratch… which is not an easy task…

So if you stumble upon any issues, please pm me… but be aware, this will not be done till i say its done…

smile.gif

that was from our admin today. He got the site back up. It’s Not my site.
