RE: The port 80, emergemcy!
"David Freeman" <[email protected]>
| Newsgroups | gmane.linux.redhat.release.guinness |
|---|---|
| Organization | Outback Queensland Internet |
| Message-ID | <002901c26a73$35d91e40$3f0a0a0a@skink> |
> My web sever has been broken by a Worm (aka'slapper'), actually. > I tried to view my apache configuration and the file (httpd.conf) > appeared empty. > > Does any one have experience on this and would like to tell me? Once hacked you can no longer trust your machine in it's current condition. If you have a complete backup from before you got hacked you could restore that. Failing that, you probably need to disconnect the machine from all network connections and do a complete rebuild from scratch after formatting all hard drives and using known-safe install media. Anything less than this will leave you without any guarantee at all that the machine isn't still compromised in some way. CYA, Dave