Skip to content
WJunction - Webmaster Forum

Server got Hacked

Status
Not open for further replies.
Somebody please help....
Some experienced hacker hacked my Windows Server 2008 RDP he took over my admin account and changed password and everything..

I still have a normal user account on it which i can access but cannot remove him.

I have some private information saved on that admin account which i really need.

Can someone please help me even if you can hack or whatever please get this idiot of my server.

You can have an account on the RDP if you do this for me please..

ADD ME ON MSN if you can help: paki_soulja_hustler@hotmail.com
 

17 comments

I`ve got a exploit to get access to admin but not sure If it`s working, it`s on beta stage by it`s dev.

Contact me on my IM or PM with the server details.
I`ll try to look into.

Edit: I`ve tried my luck but I cant do it.
Can you guys help me a bit:
These are the states:

Code:
User name                    Administrator
Full Name
Comment                      Built-in account for administering the computer/do
ain
User's comment
Country code                 000 (System Default)
Account active               Yes
Account expires              Never

Password last set            12/16/2010 4:33:03 PM
Password expires             1/27/2011 4:33:03 PM
Password changeable          12/16/2010 4:33:03 PM
Password required            Yes
User may change password     Yes

Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   12/28/2010 5:03:16 AM

Logon hours allowed          All

Local Group Memberships      *Administrators
Global Group memberships     *None

User name                    tehlolkid
Full Name                    tehlolkid
Comment
User's comment
Country code                 000 (System Default)
Account active               Yes
Account expires              Never

Password last set            12/8/2010 1:37:49 PM
Password expires             Never
Password changeable          12/8/2010 1:37:49 PM
Password required            Yes
User may change password     Yes

Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   2/27/2011 3:07:48 AM

Logon hours allowed          All

Local Group Memberships      *Administrators       *Remote Desktop Users
                             *Users
Global Group memberships     *None
The command completed successfully.

User name                    Skepta
Full Name                    Skepta
Comment
User's comment
Country code                 000 (System Default)
Account active               Yes
Account expires              Never

Password last set            12/3/2010 1:54:35 PM
Password expires             Never
Password changeable          12/3/2010 1:54:35 PM
Password required            Yes
User may change password     Yes

Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   2/27/2011 2:08:31 PM

Logon hours allowed          All

Local Group Memberships      *Remote Desktop Users *Users
Global Group memberships     *None
There are 2 admin accounts.
1. Administrator
2. tehlolkid

As per records, Administrator Password was set on 12/16/2010 & isnt changed since that date
for tehlolkid password was set on 12/8/2010 & isnt changed since that date

That guy told me that he was trying to recover the VPS from around 2 months but no one is helping him. so he just kept paying mean while...!

Looks like he is trying to take that down.
IP to that server is: 78.***.***.188
& user name is Skepta.

If anybody have sponsored it, take care.
Reported the thread as well.

sounds fishy to me.
 
Last edited:
if its a dedicated, ask your datacenter to reset the admin pass.
If its a VPS, you can ask your VPS provider to mount a Password Reset Disk on the VPS so that you can reset your pass. :)
 
lol guys, he have got access to someone`s RDP & now he want the full access to VPS.
He wanna hack the VPS, the VPS belong to someone else.
 
Status
Not open for further replies.

About the author

K
Banned · Joined
60
Messages
0
Reactions
6
Points

Advertise on WJunction

Reach 1000's of webmasters, hosts & affiliates. Banner & sponsored-thread slots available.

Contact us
Back
Top Bottom