ugh server hacked!

[x0pa]

so my server was rooted and im a mess ;p
i have mainstream clients on my server !!

and the hacked page listed one of my gay porn sites !!!

now when you do a search for said mainstream company the rooted text appears instead of the site description HOW THE HELL DO I GET RID OF THAT!!!!!


LOOSING MY MIND HERE!!!!

[HunkyLuke]

oh no!!! You will probably need a full server rebuild to remove the rootkit, so I hope your host has a backup. Removing rootkits without a restore is tricky as they can leave hidden backdoors. If you don't have a backup, or if you don't maintain an offline copy, then backup your data first and be careful with any encoded files or scripts.

Where is this hosted? I know NatNet will help get this type of situation fixed up.

[x0pa]

ya there working on it, i do have backups will make sure i request a rebuild i dont want to publicly say where im hosting

[x0pa]

my sig, anyways my last host amerinoc never happened just moved here now this... sadly this can happen anywhere so

[x0pa]

and im less concerned with my sites but more concerned with the ecommerce sites

[HunkyLuke]

glad its getting sorted, lets all hope things will get back to normal quickly!

[x0pa]

yup and ever passwd is going secure completely locked up like a mofo and i get emails every time they attempt to go at it ;p "kind of annoying"

they went after the ecommerce site ;( older script needs updating and went after ftp injection BLAH

[PFLJayden]

If you need help, shoot Jacob an email: Jacob (at) Jacobidesign.com he's helped us a few times when we've gotten hacked and he's currently helping another from resolving from getting hacked BAD. He's fabulous! He does all of our programming work.

[steven619]

Double check to make sure you have a decent software firewall. In addition you may want to add a good external firewall with intrusion prevention modules. Cisco has some good ones or email me and I can help with a few choices. Not cheap .. but if you have sites that make good revenue and/or you are hosting e-commerce with PCI needs it may be time to add some extra protection.

[x0pa]

script was vulnerable

harsh lessons but working. through it

and yes firewalls secure paawords etc