The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

does WHM have a virus scanner?

Discussion in 'General Discussion' started by unomateo, Sep 29, 2006.

  1. unomateo

    unomateo Active Member

    Joined:
    Jan 14, 2006
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    1
    I see the trojan scan, and security checks, but we have a virus on our linux server, and need to remove it.

    Does cpanel come with a virus software, or is it a 3rd party add-on?
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    Which virus? There's only 1 or 2 viruses that actually affect Linux and they're almost impossible to spread.
     
  3. unomateo

    unomateo Active Member

    Joined:
    Jan 14, 2006
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    1
    feebs

    I don't think we have the virus, but it is on our server and it is try to infect other computers.

    it renames the index.php file in all folders to _index.php then created its own index.php which try's to install an extension or gets the user to download help.zip

    it also creates a.php, a.asp, and a.pl in each folder that has an index page.

    we deleted it yesterday, but it came back this morning.

    I ran a clamav scan in the web folder and found 84 infected files.

    if this is not a virus, what is it? are we just serving these files to other computers?
     
  4. mohit

    mohit Well-Known Member

    Joined:
    Jul 12, 2005
    Messages:
    553
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Sticky On Internet
    That needs to be treated as urgent

    hi,
    i think you need to have a Admin look into this, a recent security issue was having somewhere the same kinda stuff.
    read more at:-
    http://forums.cpanel.net/showthread.php?t=58090

    It would be best that you immediately ask your server provider to look into this or you can Hire any of professional who may be able to track whats causing this and the best way out.

    see ya,
    mohit
     
Loading...

Share This Page