[cobalt-users] Server Hacked

["Mark Jaggers" <mjaggers@xxxxxxxxxx>]

I also found some files on our server that look like trojans or viruses.

Papasmurf and Linux_RST

We are now also having problems with email aliases.  I guess the only
thing we can do it a full os restore?

Are there any suggestions for doing a back before restore.  I have
already downlaoded all our sites via ftp and also did the backup
available in the system admin.

Mark


-----Original Message-----
From: Mark Jaggers 
Sent: Friday, April 18, 2003 8:23 AM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: RE: [cobalt-users] Cannot Telnet or access web admin


We are able to get into our system admin by going to the full URL but
not by going to http://www.url.co/admin

Still cannot get telnet to work.  Is there an easy way to back
everything up so that when we do a reinstall we can put everything back?
Does the RAQ backup in the admin work?

Thanks
Mark


-----Original Message-----
From: Robbert Hamburg (HaVa Web- & Procesdesign) [mailto:user@xxxxxxx] 
Sent: Friday, April 18, 2003 7:03 AM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-users] Cannot Telnet or access web admin


>  We believe that we had cleaned
> everything up and it was fine, but now today when we telnet in we log
> in
but
> then are instantly disconnected and if we go to the webadmin it says
> that the url is not found.  I can ftp in still and all the sites are 
> up.  Any ideas?  How can we get back to the webadmin?

The only thing that will work is disconnect the box from internet and do
a FULL restore. Do NOT try to clean up as you might have missed some.

Robbert


-- 
This message has been scanned for viruses and
dangerous content by HaVa.nl MailScanner, and is
believed to be clean.

_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users

_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users