Forum Moderators: phranque

Message Too Old, No Replies

Site has been hacked

my server sending out ssh attacks

         

StoutFiles

2:52 pm on Mar 2, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



My site has been hacked by someone and my server company has contacted me since my computer is now attacking other computers.

Can anyone guide me through a way to clean/refresh my server, if that makes any sense? I don't know how these things work or how they're doing it as I see no visible files on my server that I haven't added myself.

[edited by: StoutFiles at 2:54 pm (utc) on Mar. 2, 2009]

maximillianos

6:02 pm on Mar 2, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Your best bet is to start over a new machine... re-install a fresh OS and all your apps and then move all your code/data over from a backup (preferably from a backup that was done BEFORE you were hacked).

StoutFiles

6:31 pm on Mar 2, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



That's the new plan then, thanks.