Help vps got hacked

[cxartizt7]

Guys i need your help. I just bought my VPS recently about 1 week + ago, and now it got hacked, and my domain was directed to a hacker named x-legend from KHG. My important files and my hard work went all down the drain as the hacker deleted it all. zzz. I need help to prevent this, please advise me what to do as i'm new to this. really need advice asap

[suwunk]

Hi cxartizt7,

What VPS Plans do you use? have you checked your log files?

-Search modified or removed files.

Virtuozzo for Linux
# /usr/share/vzpkgtools/vzrpm/bin/rpm --root=/vz/root/101 --veid 101 -Va | egrep '^..5|missing'
-find / -user apache and add apache user to your cron.deny (malicious scripts Usually owned by the apache user.)
-Remove any rootkits + malicious script
-Restore your backup

[cxartizt7]

Hi cxartizt7,

What VPS Plans do you use? have you checked your log files?

-Search modified or removed files.

-find / -user apache and add apache user to your cron.deny (malicious scripts Usually owned by the apache user.)
-Remove any rootkits + malicious script
-Restore your backup

I am using the Win 2003 Developer VPS plan.
I had reinitialized my container, & changed my password. So is there a need to remove rootkis + those things?

[suwunk]

Hi cxartizt7,

You can remove rootkits + malicious script by an AV of your choice.
For the further assistance you can contact our CS.
http://myhosting.com/help/phone-support.aspx
1 (866) 289-5091

[cxartizt7]

Hi cxartizt7,

You can remove rootkits + malicious script by an AV of your choice.
For the further assistance you can contact our CS.
24/7 In-House Phone Support | myhosting.com (http://myhosting.com/help/phone-support.aspx)
1 (866) 289-5091

How do i find root kits and malicious scripts in my system?

[ermans]

Use same steps as you clean your computer. It does not have much of difference

[Randy5]

In response to suwunk's comment that "You can remove rootkits + malicious script by an AV of your choice": Is that true in all cases / with all systems?

[suwunk]

In response to suwunk's comment that "You can remove rootkits + malicious script by an AV of your choice": Is that true in all cases / with all systems?
Rootkits can lie hidden on computers and remain undetected by anti-virus software. Although new rootkits can be prevented from infecting the system, if you had any rootkits before you installed your anti-virus, they may never be revealed. sometimes you need specific anti rootkits to remove it. Thats why i ask cxartizt7 to contact CS for looking the problem and getting some assistance. :)