Printable View
Guys i need your help. I just bought my VPS recently about 1 week + ago, and now it got hacked, and my domain was directed to a hacker named x-legend from KHG. My important files and my hard work went all down the drain as the hacker deleted it all. zzz. I need help to prevent this, please advise me what to do as i'm new to this. really need advice asap
Hi cxartizt7,
What VPS Plans do you use? have you checked your log files?
-Search modified or removed files.
-find / -user apache and add apache user to your cron.deny (malicious scripts Usually owned by the apache user.)Quote:
Virtuozzo for Linux
# /usr/share/vzpkgtools/vzrpm/bin/rpm --root=/vz/root/101 --veid 101 -Va | egrep '^..5|missing'
-Remove any rootkits + malicious script
-Restore your backup
I am using the Win 2003 Developer VPS plan.Quote:
Originally Posted by suwunk
I had reinitialized my container, & changed my password. So is there a need to remove rootkis + those things?
Hi cxartizt7,
You can remove rootkits + malicious script by an AV of your choice.
For the further assistance you can contact our CS.
http://myhosting.com/help/phone-support.aspx
1 (866) 289-5091
How do i find root kits and malicious scripts in my system?Quote:
Originally Posted by suwunk
Use same steps as you clean your computer. It does not have much of difference
In response to suwunk's comment that "You can remove rootkits + malicious script by an AV of your choice": Is that true in all cases / with all systems?
Rootkits can lie hidden on computers and remain undetected by anti-virus software. Although new rootkits can be prevented from infecting the system, if you had any rootkits before you installed your anti-virus, they may never be revealed. sometimes you need specific anti rootkits to remove it. Thats why i ask cxartizt7 to contact CS for looking the problem and getting some assistance. :)Quote:
Originally Posted by Randy5