0

So I am running this Drupal 7 website, I just checked users list and got surprised with this: enter image description here

As you can see the usernames are spam and their emails are also spam. But I do not get it how they did that and even get themselves an admin role. Also log shows they even enabled the php filter module. Also the registrations are disabled so how? Even if the users where registered via site register form it would show its 1 week old or so, not the 44 years.

I don't get it. What should I do? Also I have User Protect module installed.

| improve this question | |
  • sure looks like it - take a look at this question for further information - I presume you are using a version below 7.32? – Geoff Dec 1 '14 at 16:55
  • You are right it's 7.31. How do I select you as correct answer? – Optimus Prime Dec 1 '14 at 17:00
  • You need to upgrade you version of Drupal immediately to the latest version available. There was a major security vulnerability found recently. More information on testing and cleansing can be found in this question. – Geoff Dec 1 '14 at 17:10
  • Take a look at this drupal.stackexchange.com/questions/138359/… – cayerdis Dec 1 '14 at 18:05
  • 1
    Please note, that since you have been hacked already, there is no real fix anymore. In most cases, the hackers actually patched your site (in order to keep other hackers away). But your server has been compromised now. The only secure way is to rollback to a backup prior to October 15th (not just Drupal but your whole file system and databases). – Paul Dec 1 '14 at 18:26

Browse other questions tagged or ask your own question.