The server my site is on was infected using the (pardon my obfuscation)

 Y-E-S E-x-p-l-o-i-t S-y-s-t-e-m

It is a "control kit".

I found out some info about it from http://cassandrasecurity.com/?p=282

How can I remove this control kit and secure the system? Trojan scans reveal an infected GD library.

link|improve this question

71% accept rate
1  
feedback

1 Answer

up vote 4 down vote accepted

Reinstall the system. It sucks, but that's the only way you'll be sure its secure.

link|improve this answer
Oof, that's annoying. How do I do that? – Cyclone Nov 2 '09 at 18:33
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.