SQL Server hijacked?

  • It appears the SQL server that my website uses has been hijacked and I'm wondering what if anything I can do to recover my databases?  Currently I can't login to the server via Enterprise Manager and get the error that my credentials don't match.  I have the 'sa' password which i changed from 'null' at install and still can't gain access to it.  Additionally it appears the mdf/ldf files for my database are no longer on the system as searches like *.mdf don't turn up the database I'd like to recover.  I'm wondering if anyone may have any suggestions/links that could help me recover my database?

    Thanks.

  • First things first...  I hope you have good backups.  Your information is a bit schetchy--do you still have the master.mdf & .ldf (and model and msdb) or are those gone too?  Take a look at the SQL error logs to help you find out what happened (you can open them in notepad).  Also, look at the server application & system logs. 

    But first, I'd restore the databases.  Then I'd check with the network and/or server people regarding security, firewalls, etc., then I'd do the research.  If a security breach happened once, it will probably happen again.  Good luck.

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply