This question already has an answer here:
- How do I deal with a compromised server? 12 answers
I have a server with cPanel installed on Centos 5.9.
Three days ago, my server provider told me I'm infected by "Ebury Trojan".
I read a lot of things saying that the openSSH server coming with cPanel may be infeted and how to detect it. Some says that the package using "Yum" may be corrupted as well.
So how to remove the ebury trojan once and for all?
How can I install a clean openSSH version on cPanel / Centos 5.9?
How to be sure my server will not be corrupted by this trojan as it sends passwords to third parties (of course I've changed the passwords)?