site defaced help

hi my cousins site has just been defaced and he uses freewebs but the thing that im asking is can i put the site back to normal because it is defaced sometimes that i go on but when i come back its normall help :confused:


here is the site http://www.freewebs.com/residentevillover/

Ummmm..What?

Are you saying your site is sometimes defaced but then sometimes not?

Please restate your question with a bit more detail.

Try breaking your question into more than one sentence..?? :)

SGS

what i meen is that some times its defaced and some times its not


and if you go into the slipknot section it tells two emails are those real

Don't think thats a defacement...

Those email addresses exchangers recognize the prefix as a legit addy
If that is what you are asking.

Quote:

---

Originally posted here by disturb
what i meen is that some times its defaced and some times its not

---

Now this has me a little confused :confused: , what does the site look like when it's "defaced". Is there any message left by the defacer? How long does it stay defaced?

Cheers:

If the site is hosted by freewebs there's not much you can do but contact their support. I use freewebs as well and they usually respond rather quickly.
Has he/she tried changing the account password and such?

hey disturb i would like to help you but your answers are kinda disturbed :P
Could you sit down and calmly explain to us all what is happened, with details?
Im really lost here.

Quote:

---

hi my cousins site has just been defaced and he uses freewebs but the thing that im asking is can i put the site back to normal because it is defaced sometimes that i go on but when i come back its normall help

---

The site back to normal? You havent made a back up? Do you guys check the raw log files? JFYI The controlpanel allows you to Reset/Change Passwords. Espically Administrator. If this person did manage to deface your site means he has access, administrator access to the database, log files, domain, Setting Up Your Mail getting forward to his private e-mail address. Adding users removing users etc... pretty much owned.

This is what I found out by the URL:

Linux Apache/1.3.26 (Unix) mod_gzip/1.3.19.1a mod_throttle/3.1.2 Changed for security puposes 00.144.00.34 UpIn60 Technologies
Linux Apache/1.3.26 (Unix) mod_gzip/1.3.19.1a mod_throttle/3.1.2 changed for security puposes 00.144.00.38 Netblock owners --> UpIn60 Technologies

Have you tried contacting freewebs.com informing them of whats been going on? Have you tired to contat [email protected] I would make sure to change the password. Do you guys have FTP access aswell? Hope this helps, Computernerd22

Last thing you want is for this to happen to you and your friend: Gained Administrator Access heres a pic:

Why not get a more secure password? Or just contact freewebs. I also had a similar problem when useing freewebs.