Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Possible Duplicate:
My server's been hacked EMERGENCY

Our client VPN Server got hacked, we change the password and FTP but it keeping happening every day now :( , Has any on had a hacked message like the "Hacked By ENES" visit "essexdrugaction[dot]org" to see what i mean.

Any help would be most appreciated.

share|improve this question

marked as duplicate by Sven, DanBig, Bart De Vos, womble, gWaldo Aug 3 '12 at 12:14

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

Can't help you if we don't have any facts. What web sites are you running? How are they configured? Are they fully patched and up to date? – Rushyo Aug 3 '12 at 12:02
All the file keeps on getting deleted. – Jermaine Hercules Aug 3 '12 at 12:02
Burn it down, rebuild it with backup. This is the only valid answer you will receive here. – DanBig Aug 3 '12 at 12:08
the site is, as for configs I have no clue i have never touch a VPN server before – Jermaine Hercules Aug 3 '12 at 12:09
Take the hacked server offline, make a full backup for later analyses (So you know how did they got in). Reformat. Install a clean OS, update the OS and used programs. Only then restore data from backup and bring the server back on-line. – Hennes Aug 3 '12 at 12:13

Kill it, kill it now.

Nuke it into orbit and rebuild it. There is no way of knowing you got everything they did to the server. Start fresh and reinstall your OS.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.