RE: The port 80, emergemcy!

"David Freeman" <[email protected]>
Newsgroups gmane.linux.redhat.release.guinness
Organization Outback Queensland Internet
Message-ID <002901c26a73$35d91e40$3f0a0a0a@skink>
 > My web sever has been broken by a Worm (aka'slapper'), actually.
 > I tried to view my apache configuration and the file (httpd.conf)
 > appeared empty.
 > 
 > Does any one have experience on this and would like to tell me?

Once hacked you can no longer trust your machine in it's current
condition.  If you have a complete backup from before you got hacked you
could restore that.  Failing that, you probably need to disconnect the
machine from all network connections and do a complete rebuild from
scratch after formatting all hard drives and using known-safe install
media.

Anything less than this will leave you without any guarantee at all that
the machine isn't still compromised in some way.

CYA, Dave
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.