<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel>
        <title>Was I hacked?</title>
        <description> I had a Boat Buildihg phorum forrum for many years, with something like 20,000 posts.  
At its high point I got as many as 10 posts a day.

Traffic gradually plunged to near zero. Why is not clear.  Perhaps it had something to do with similar groups on Facebook etc.

I turned it off for about a year.  Now I want to bring it back.
I loaded a daatabase with a mysql dump.  What I see is an empty forum, even though--when I use a terminal to log into the mysql databae select count(message_id) from phorum_messages shows 22293 messages.

But the page display for that forum shows 0

I also found, in phorum messages, the following:

 I have backed up all your databases. To recover them you must pay 0.0135 Bitcoin to this address: 1FobWASbipzwqWK21D8mBLe4ysDPXjQqD1. Backup list: montana_mrblogins, montana_phorum, mrblogins. After your payment email me at &amp;#114;&amp;#100;&amp;#97;&amp;#116;&amp;#97;&amp;#98;&amp;#97;&amp;#115;&amp;#101;&amp;#46;&amp;#50;&amp;#49;&amp;#48;&amp;#52;&amp;#64;&amp;#111;&amp;#110;&amp;#105;&amp;#111;&amp;#110;&amp;#109;&amp;#97;&amp;#105;&amp;#108;&amp;#46;&amp;#111;&amp;#114;&amp;#103; with your server IP (64.202.188.192) and transaction ID. Emails without transaction ID will be ignored.</description>
        <link>https://www.phorum.org/support/read.php?61,162746,162746#msg-162746</link>
        <lastBuildDate>Wed, 16 Sep 2026 17:06:56 -0500</lastBuildDate>
        <generator>Phorum 6.0.4</generator>
        <item>
            <guid>https://www.phorum.org/support/read.php?61,162746,162747#msg-162747</guid>
            <title>Re: Was I hacked?</title>
            <link>https://www.phorum.org/support/read.php?61,162746,162747#msg-162747</link>
            <description><![CDATA[ To Start... on a local machine.<br />
Use a backup of the backup.<br />
Extract the backup from the dump file  (??????????_xxxxxxxx_2015_11_13_21_13.sql.gz.)<br />
Open the xxxxx.SQL file in &quot;Textpad&quot; or &quot;Notepad++  ,  or equivalent,   not Windows &quot;Notepad&quot;.<br />
Don&#039;t turn word wrap on.<br />
<br />
The file should be readable for the most part<br />
Locate the line<br />
<blockquote class="bbcode"><div><small>Quote<br /></small><strong></strong><br />--<br />
-- Data for Table `Your Prefix_messages`<br />
--</div></blockquote>    Scroll down<br />
<blockquote class="bbcode"><div><small>Quote<br /></small><strong></strong><br />INSERT INTO `Your Prefix_messages`</div></blockquote>
The line after should be a message.  <br />
See photo sample. Most of it should be readable, if it is not check a few more messages.<br />
<br />
If the dump file is readable there could be other issues.]]></description>
            <dc:creator>Scott Finegan</dc:creator>
            <category>Phorum Support</category>
            <pubDate>Fri, 14 Jul 2023 10:53:18 -0500</pubDate>
        </item>
        <item>
            <guid>https://www.phorum.org/support/read.php?61,162746,162746#msg-162746</guid>
            <title>Was I hacked?</title>
            <link>https://www.phorum.org/support/read.php?61,162746,162746#msg-162746</link>
            <description><![CDATA[ I had a Boat Buildihg phorum forrum for many years, with something like 20,000 posts.  <br />
At its high point I got as many as 10 posts a day.<br />
<br />
Traffic gradually plunged to near zero. Why is not clear.  Perhaps it had something to do with similar groups on Facebook etc.<br />
<br />
I turned it off for about a year.  Now I want to bring it back.<br />
I loaded a daatabase with a mysql dump.  What I see is an empty forum, even though--when I use a terminal to log into the mysql databae select count(message_id) from phorum_messages shows 22293 messages.<br />
<br />
But the page display for that forum shows 0<br />
<br />
I also found, in phorum messages, the following:<br />
<br />
 I have backed up all your databases. To recover them you must pay 0.0135 Bitcoin to this address: 1FobWASbipzwqWK21D8mBLe4ysDPXjQqD1. Backup list: montana_mrblogins, montana_phorum, mrblogins. After your payment email me at <a href="mailto:&#114;&#100;&#97;&#116;&#97;&#98;&#97;&#115;&#101;&#46;&#50;&#49;&#48;&#52;&#64;&#111;&#110;&#105;&#111;&#110;&#109;&#97;&#105;&#108;&#46;&#111;&#114;&#103;">&#114;&#100;&#97;&#116;&#97;&#98;&#97;&#115;&#101;&#46;&#50;&#49;&#48;&#52;&#64;&#111;&#110;&#105;&#111;&#110;&#109;&#97;&#105;&#108;&#46;&#111;&#114;&#103;</a> with your server IP (64.202.188.192) and transaction ID. Emails without transaction ID will be ignored.]]></description>
            <dc:creator>salmobytes</dc:creator>
            <category>Phorum Support</category>
            <pubDate>Thu, 13 Jul 2023 23:00:18 -0500</pubDate>
        </item>
    </channel>
</rss>
