The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

WHM Hacked

Discussion in 'General Discussion' started by jeeten, Feb 1, 2011.

  1. jeeten

    jeeten Registered

    Joined:
    Feb 1, 2011
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Hello All,

    Our server was hacked before few days ago, I have changed all root, reseller and every hosting accounts password. But problem is the hackers has upload a .php file in our every hosting accounts, now Here i need solution to remove these files at once from bash or something else. Do you people have any solution for that? And as well as how can we check, how, when and from where the MF hacker's has access to hack our accounts?.
    Please guys do some help.
    Thank You

    Jeeten
     
  2. jeeten

    jeeten Registered

    Joined:
    Feb 1, 2011
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Hello All,

    Our server was hacked before few days ago. I have change all the password of root, reseller accounts as well as ever hosting accounts. But the problem is that, the mf hacker's has upload a .php file in our every hosting accounts. How can I remove this file from every hosting account at once ? Because It took too long to remove one by one, so please give me some solutions. And how can i know how, when and from where the hackers had access the account or accounts to hack our accounts.

    Thanks in advance.

    Jeeten
     
  3. LinuxTechie

    LinuxTechie Well-Known Member

    Joined:
    Jan 22, 2011
    Messages:
    502
    Likes Received:
    2
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Hi Jeeten,

    It can only be removed using some custom scripts.

    You need to check ftp,cpanel and apache logs to find how it was uploaded. You can also check /var/log/secure to check if any one had tried to login to the server.
     
  4. forum17

    forum17 Active Member

    Joined:
    Mar 30, 2007
    Messages:
    29
    Likes Received:
    0
    Trophy Points:
    0
    Hello,

    You can use the following command to remove files with name .php .

    find -name ".php" -exec rm -f "{}" \;

    Regards,
    host.co.in.
     
  5. forum17

    forum17 Active Member

    Joined:
    Mar 30, 2007
    Messages:
    29
    Likes Received:
    0
    Trophy Points:
    0
    Hello,

    You can use the following command to remove all files with name ".php"

    find -name ".php" -exec rm -f "{}" \;
    It would be better if you execute command find -name ".php" first then check the output (Once you find output doesn't contain any important file )and then execute command given above.

    Regards,
    host.co.in
     
  6. forum17

    forum17 Active Member

    Joined:
    Mar 30, 2007
    Messages:
    29
    Likes Received:
    0
    Trophy Points:
    0
    Just wanted to add one more point to above thread.

    It would be better if you execute command find -name ".php" instead of find -name ".php" -exec rm -f "{}" \; then check the output (Once you find output doesn't contain any important file) then execute command given above.

    Regards,
    host.co.in
     
Loading...

Share This Page