Search found 63 matches

by Webdiggity
Sun Feb 08, 2004 9:04 pm
Forum: The Lounge
Topic: My server has been hacked.
Replies: 74
Views: 30478

I did some digging in my control panel and the updates were set to automatically upgrade to the next stable releases on the system software and control panel software so I don't think they would have gotten in that way. Did you get the E-mail I sent you that I received from a customer. I sent it in ...
by Webdiggity
Sun Feb 08, 2004 8:39 pm
Forum: The Lounge
Topic: My server has been hacked.
Replies: 74
Views: 30478

I would like to add that I'll have this server until the end of the month so Void, if you have someone that you trust who wants a peek at the box, let me know. :) After the 28th this server turns back into a pumpkin. :)
by Webdiggity
Sun Feb 08, 2004 8:54 am
Forum: The Lounge
Topic: My server has been hacked.
Replies: 74
Views: 30478

I pm'ed you the login that I rarely use for SSH.
by Webdiggity
Sat Feb 07, 2004 11:10 am
Forum: The Lounge
Topic: My server has been hacked.
Replies: 74
Views: 30478

Running the find parasite script now. :)
by Webdiggity
Sat Feb 07, 2004 9:48 am
Forum: The Lounge
Topic: My server has been hacked.
Replies: 74
Views: 30478

I'm nearly done copying the accounts only the /home accounts. When I'm done I'll let you poke around in there if you want. I really won't have a need for it. I killed that process last night and uninstalled it per the sk u command. This morning it was back. Yikes. We may have stumbled onto something...
by Webdiggity
Sat Feb 07, 2004 12:38 am
Forum: The Lounge
Topic: My server has been hacked.
Replies: 74
Views: 30478

root@dig2 [/usr/include/sdk386]# ./sk u * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * SUCKIT SUCKIT * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * Currently installed version: v1.1c Removing from memory...OK, previous call dispatch 0xc02dc9d8 at 0xc01088bf ...
by Webdiggity
Sat Feb 07, 2004 12:37 am
Forum: The Lounge
Topic: My server has been hacked.
Replies: 74
Views: 30478

root@dig2 [/usr/include/sdk386]# ./sk u * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * SUCKIT SUCKIT * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * Currently installed version: v1.1c Removing from memory...OK, previous call dispatch 0xc02dc9d8 at 0xc01088bf ...
by Webdiggity
Sat Feb 07, 2004 12:29 am
Forum: The Lounge
Topic: My server has been hacked.
Replies: 74
Views: 30478

Can I dump the output of the u (uninstall command) to a file too?

Just wondering.
by Webdiggity
Sat Feb 07, 2004 12:14 am
Forum: The Lounge
Topic: My server has been hacked.
Replies: 74
Views: 30478

I did alot of searchin too and couldn't find it. Did a search for rewtkit tho and it came back to phrack.com Not alot of links tho.
by Webdiggity
Fri Feb 06, 2004 11:47 pm
Forum: The Lounge
Topic: My server has been hacked.
Replies: 74
Views: 30478

Looks like it worked. * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * SUCKIT SUCKIT * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * Currently installed version: v1.1c Making all pid's visible...OK root@dig2 [/usr/include/sdk386]# Running your thing now. I'll u...
by Webdiggity
Fri Feb 06, 2004 11:42 pm
Forum: The Lounge
Topic: My server has been hacked.
Replies: 74
Views: 30478

Since i've been rooted does that mean my /home directory is safe to copy out?
by Webdiggity
Fri Feb 06, 2004 11:40 pm
Forum: The Lounge
Topic: My server has been hacked.
Replies: 74
Views: 30478

those are all I could see in the directory. What would you do? Run the unhide or just try to get rid of it?
by Webdiggity
Fri Feb 06, 2004 11:22 pm
Forum: The Lounge
Topic: My server has been hacked.
Replies: 74
Views: 30478

Wow, and you haven't been working there that long. haha. I must have their relatives here where I work. haha
by Webdiggity
Fri Feb 06, 2004 11:06 pm
Forum: The Lounge
Topic: My server has been hacked.
Replies: 74
Views: 30478

DAng, here it comes. ONly 240k too. :(

Are you feeling like you're dealing with an idiot yet?
by Webdiggity
Fri Feb 06, 2004 10:57 pm
Forum: The Lounge
Topic: My server has been hacked.
Replies: 74
Views: 30478

No, thank you. :)

One positive from all this. I have learned a ton more about Linux and my server. I've been reading stuff non-stop for the past 48 hours. :)