Hi ,
i have a hosted Ubuntu server which contain some of our sites. One of them have been hacked... inside the site directory are created automatically a bunch of directories with links to some other sites. If i delete them, they are created back.. how/what i can do?
Directory's are created with an user/group id that is not listed in /etc/pasw.
Ubuntu 9.04
Apache/2.2.11 (Ubuntu) DAV/2 PHP/5.2.6-3ubuntu4.5 with Suhosin-Patch mod_ssl/2.2.11 OpenSSL/0.9.8g Server at xxx Port 80
Any help appreciated!
Bookmarks