Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

server rooted

Discussion in 'General Discussion' started by jfall, Mar 12, 2005.

  1. jfall

    jfall Member

    May 8, 2004
    Likes Received:
    Trophy Points:
    Unfortunately one of our servers was rooted today. The hacker deleted every single index.html, index.asp, index.htm and index.php file on the server and replace it with a hack message. Unfortunately they didn't rename the files, they deleted them.

    Im looking into ways that I can recover from this hack. Most user accounts are backed up, I should be able to write a script to extract the index files from there and replace the bad index files. What about other index files on the server though? cPanel itself uses a lot of html files which have also been deleted, how could I go about recovering those files?
  2. DigitalN

    DigitalN Well-Known Member

    Sep 23, 2004
    Likes Received:
    Trophy Points:
    I assume that you will be restoring the OS, either way, reinstalling cPanel will resolve the missig cPanel files. You should just find the point of entry if possible, then restore and reinstall cPanel, then restore the account data.

    If you aren't going to restore, then /scripts/upcp --force should replace the cPanel files.
  3. dr2web

    dr2web Active Member

    Jan 14, 2005
    Likes Received:
    Trophy Points:
    Once you get it all restored, you might want to take a look at some of the articles at THere are a lot of articles there on firewalls, and such and there is a section on cpanel..

    Quite useful.

    .:: mIKE

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice