Compromised Linux Server - HELP!!

OK...I have a self managed Fasthosts Linux server that has been compromised badly!

I have over 50 web sites on it and data and I really need some expert help to get the server back on track. SSH is available and I think that is all! None of the web sites seem to be responding but I am unsure if the sites have been deleted or it is a server problem!

I cannot stress that I need a real expert that understands Linux, Mysql, phpmyadmin etc......please do not try for this job if you THINK you can do it...I NEED AN EXPERT...A GOOD EXPERT.

Below is the email from Fasthosts regarding the problems!

If you can help please get in touch......Thanks...Paul


Thank you for getting back to us. I can confirm that the passwords we provided are correct, and SSH is accessible using them. Unfortunately, the Matrix CP is not going to work, as most of it is completely missing. It would usually reside in the /opt folder, but this is not present. Also, whilst looking through the command history to see why this happened, I have found several suspicious looking commands. Examples of this are:

lwp-download [url removed, login to view]

wget [url removed, login to view]

lwp-download [url removed, login to view]

perl [url removed, login to view] [url removed, login to view] "" "Cartao com Carinho Para Voce" [url removed, login to view]

There are lots more. It appears to me that the server has been compromised, and I must ask you to rebuild it as soon as is possible. There is no telling how far the attackers has got their claws in to the server, and also no telling whether they have removed pertinent logfiles relating to it. They have had root access, so they have not been limited at all. - EMAIL ENDS

Also I will want all of the sites and databases (DB's are only small) taking from the server, the server rebuilding which is a function provided by Fasthosts server management area and then all of the sites reinstating along with the databases and phpmyadmin to manage them etc....basically save my sites and databases perform a server rebuild and reinstate on a rebuilt clean server.

Beceriler: Linux

Daha fazlasını gör: find linux server beed compromised, voce over, how do you get linux, compromised linux, linux compromised server, check linux server compromised, look compromised linux server, compromised linux server spam, look linux server compromised, checking compromised linux server, rebuild linux server ssh, you can do it we can help, server job, need help getting a job, job help, i need help getting a job, get linux, server help, reside, perl linux, linux, linux ssh server, linux expert, linux email, linux c++

İşveren Hakkında:
( 4 değerlendirme ) Pontefract, United Kingdom

Proje NO: #213479



Please check the private message for details.

%selectedBids___i_period_sub_7% gün içinde 200%project_currencyDetails_sign_sub_9% %project_currencyDetails_code_sub_10%
(20 Değerlendirme)

Bu iş için 7 freelancer ortalamada $250 teklif veriyor


Ready to do it.

in %bids___i_period_sub_35% gün içinde250%project_currencyDetails_sign_sub_37% %project_currencyDetails_code_sub_38%
(62 Değerlendirme)

Please check your PMs. Thanks, [login to view URL]

in %bids___i_period_sub_35% gün içinde150%project_currencyDetails_sign_sub_37% %project_currencyDetails_code_sub_38%
(37 Değerlendirme)

Can start immediately. Please ask any questions in PMB. My feedback shows all my server administration experience.

in %bids___i_period_sub_35% gün içinde300%project_currencyDetails_sign_sub_37% %project_currencyDetails_code_sub_38%
(8 Değerlendirme)

Ready to begin. Please see PM.

in %bids___i_period_sub_35% gün içinde250%project_currencyDetails_sign_sub_37% %project_currencyDetails_code_sub_38%
(4 Değerlendirme)

Please see PMs for more details. Best regards, Creaws team.

in %bids___i_period_sub_35% gün içinde300%project_currencyDetails_sign_sub_37% %project_currencyDetails_code_sub_38%
(1 Yorum)

Please, read PMB.

in %bids___i_period_sub_35% gün içinde300%project_currencyDetails_sign_sub_37% %project_currencyDetails_code_sub_38%
(0 Değerlendirme)