New answers tagged source
In case of a compromise, there are usually two ideas: take the machine off the net NOW, as it may inflict more damage. Check how the bad guy did come in and rebuild the machine from scratch without that specific loophole. Only restore from backups what exactly has been verified as "okay", don't be tempted to restore "the latest backup" and "remove some ...
Top 50 recent answers are included