[wplug] Need some help

[Tom Rhodes]

On Sun, 22 Oct 2006 18:49:11 -0400
"Ken Rambler" <ken at ramblernet.com> wrote:

> WPLUG Friends,
>  
> I'm needing some assistance with a server issue.
>  
> Within the past 2 days, I've had one server compromised where a PayPal spoof
> site was set up. I'm looking for someone that can help me identify the means
> used to gain access. I'd prefer to speak by phone rather than post my server
> settings and risk further exploits.
>  
> If you can spare a few minutes, I would appreciate it. Send me a reply and I
> can share the contact number, its in the Pittsburgh area.

rkhunter is your friend.
yum update (or FreeBSD-update on my system) is useful.
check your system logs.

-- 
Tom Rhodes