Linked Questions
158 questions linked to/from How do I deal with a compromised server?
7
votes
2
answers
5k
views
Hacked Ubuntu server, probably hacked commands (netstat, ps, ...), how to replace them? [duplicate]
An Ubuntu server of my company has been hacked to carry out a DoS attack. I found the shellshock bug had not been fixed by my colleagues, and I think it's the problem.
Then, I found an ELF file that ...
- 97
14
votes
2
answers
33k
views
Advice on what to do after being hacked? [duplicate]
After running a system scan earlier today, I found that my computer had been infected by a trojan horse. My reason for running the scan was because Windows kept shutting down and then recovering.
...
- 141
7
votes
3
answers
31k
views
How can I kill minerd malware on an AWS EC2 instance? [duplicate]
I have an AWS EC2 instance running RHEL 7.2 which seems to have been hacked by a BitCoin CPU Miner. When I run ps -eo pcpu,args --sort=-%cpu | head, it shows that there is a CPU miner that's taking up ...
- 289
6
votes
3
answers
4k
views
My sites have been hacked by cpamatik.com , it passes all security checks with Google and Sucuri, but still redirects, any idea? [duplicate]
Almost all my sites got hacked by cpamatik.com virus
All CMS were up to date, plugins, modules etc..(Drupal and Wordpress) , some sites I have logged in to work on, but some sites I haven't touched ...
- 193
1
vote
2
answers
5k
views
Fake Microsoft Security Department [duplicate]
some Indian man called home saying that he's calling from some Windows Security Department, and there are about 16 other people connected to my computer and the're doing illegal things on my computer. ...
1
vote
3
answers
7k
views
Malware Suddenly Uploaded To My Website! [duplicate]
This is my first question here on the IT Security section of Stack Exchange, so if there is any problems with my question I apologize.
Basics
Suddenly Google says that my website contains Malware!
...
- 153
3
votes
2
answers
3k
views
A process called ./watchbog is mining crypto currency in our server. How do I stop it? [duplicate]
I have found this question below but I need some more clarification that's why I am writing again.
I have a process called “watchbog” that is completely hogging my CPU and I don't know what it is
...
- 139
0
votes
1
answer
4k
views
Command & Control Server List [duplicate]
I recently got an email from my ISP saying that they'd detected traffic to a known Command & Control server from my home. Boo. I'm sure this probably means one of our computers has some awful ...
- 109
2
votes
1
answer
2k
views
Can you get rid of the ZeroAccess botnet without a complete reinstall? [duplicate]
I'm interested in the recommended course of action for when you find a (Windows) system infected with the ZeroAccess botnet.
I've seen various blog posts online recommending that the user download ...
- 2,436
1
vote
2
answers
865
views
How to know if a host has been compromised and re-secure it again? (particular case of a raspberry) [duplicate]
I'm running a raspberry PI and I've accidentally left the 22 port open to it from a public IP for about 24 hours. Raspberries' raspbian distro comes by default with a "pi" user and "raspberry" ...
- 161
6
votes
1
answer
2k
views
I have a process called “watchbog” that is completely hogging my CPU and I don't know what it is [duplicate]
This process that has come out of nowhere is hogging my CPU and I have no clue what it is or how to get rid of it. You can see in the image below what it's doing:
What is this process? How can I get ...
0
votes
1
answer
3k
views
How can we find out the fully undetectable virus and kill it in our computer? [duplicate]
As I know, most hacker can crypt the virus to bypass all antivirus.
Even famous antivirus like kaspersky and avast doesn't know it.
So, is there a good way to find out the FUD virus and protect from ...
- 1,215
-2
votes
2
answers
2k
views
Is it safe to use a computer for banking etc after you have removed a virus from it? [duplicate]
So one of my laptops had a virus recently. I managed to remove it by running my computer in safe mode and then running my Antivirus software (norton). My laptop appears on be running fine now.
...
- 212
0
votes
1
answer
2k
views
PHP mallware attack [duplicate]
I'm desprate because my site has been attacked by some malware that adds code below on every php files. I tried to edit and chmod the infected file but its coming back. Scanning with ClamAV found ...
5
votes
2
answers
687
views
How to evaluate the damage after being hacked [duplicate]
It's well known what measures one should take to prevent hackers from hacking their PC. But are there any steps that allows a user to evaluate the damage done by a hacker?
Say that I know for sure ...
- 1,188