0
votes
0answers
37 views

Website attacked by malware.. How to protect in the future [duplicate]

My Web site (saved in a linux server) was attacked last week by some malware that wrote a script in all index files, javascripts and html files. And the site was blacklisted by google. These are the ...
0
votes
2answers
87 views

How do I remove 1 line of code from PHP files containing a specific string? [duplicate]

By coincidence I noticed that quite some of the PHP files of the sites I host have had malware injected: They all have the following line before the original/correct code: <?php ...
0
votes
0answers
49 views

Glupteba botnet controller - how find process [duplicate]

My server IP adress is blocked by SpamHaus SBL list: Glupteba botnet controller @x.x.x.x The host at this IP address is running a malware botnet controller which is being used to control infected ...
0
votes
1answer
128 views

Almost all of our websites within our server is redirecting to a porno scammy sites [duplicate]

We are having a problem within our server. After transferring the files to a new dedicated server, within only one or two weeks almost every website under our server is redirecting to a porno scammy ...
-1
votes
1answer
929 views

Anti-Malware Antivirus for Linux Web Server? [closed]

Does anyone have experience running anti-virus software on a Linux web server, especially CentOS, and what do you recommend? I'm interested in putting it on a web server we have as one more method ...
-3
votes
2answers
599 views

Rootkit scanning

Are there any good services or ways to scan for rootkits and backdoors? I know there are rkhunter and chkrootkit but are they even ideal anymore? They never seem updated and look more like they were ...
0
votes
1answer
439 views

identity and rectify port scanning activities on CentOS [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY My Linux (CentOS 5.x) machine seem to have been attacked. Port scanning activities were traced to it. However, the ports (to be) ...
1
vote
3answers
819 views

Scan whole system or just user dirs with clamav

I'm in doubt about how to scan my Linux system with Clamav: do I just scan the places where users can upload files (homedirs, their webroots) or do I scan the whole system? The various sites I've ...
1
vote
2answers
919 views

Linux Stealth Process

I have a process named "stealth" that has infected my server (slamming my CPU) and I can't figure out where it is to remove it for good. Everytime I kill the process it somehow starts itself again... ...
0
votes
1answer
97 views

Server redirect malware

I have a linux packaged server (is that right?) that I run for a coworker. It has recently been hacked and I've been trying for the last few days to get rid of the malware. It now redirects most of my ...
8
votes
1answer
596 views

Is it possible to hide a malicious alias in Bash on Linux?

Is it possible to conceal the existence of a malicious alias in Bash on a Linux system and have it executed by the user without their knowledge?