Linked Questions

7 votes
2 answers
5k views

Hacked Ubuntu server, probably hacked commands (netstat, ps, ...), how to replace them? [duplicate]

An Ubuntu server of my company has been hacked to carry out a DoS attack. I found the shellshock bug had not been fixed by my colleagues, and I think it's the problem. Then, I found an ELF file that ...
roghan's user avatar
  • 97
7 votes
3 answers
32k views

How can I kill minerd malware on an AWS EC2 instance? [duplicate]

I have an AWS EC2 instance running RHEL 7.2 which seems to have been hacked by a BitCoin CPU Miner. When I run ps -eo pcpu,args --sort=-%cpu | head, it shows that there is a CPU miner that's taking up ...
Anish Sana's user avatar
14 votes
2 answers
33k views

Advice on what to do after being hacked? [duplicate]

After running a system scan earlier today, I found that my computer had been infected by a trojan horse. My reason for running the scan was because Windows kept shutting down and then recovering. ...
sebra's user avatar
  • 141
6 votes
3 answers
4k views

My sites have been hacked by cpamatik.com , it passes all security checks with Google and Sucuri, but still redirects, any idea? [duplicate]

Almost all my sites got hacked by cpamatik.com virus All CMS were up to date, plugins, modules etc..(Drupal and Wordpress) , some sites I have logged in to work on, but some sites I haven't touched ...
Bruno  Vincent's user avatar
1 vote
2 answers
5k views

Fake Microsoft Security Department [duplicate]

Someone called my home saying that he was calling from Windows Security Department. He said that there are about 16 other people connected to my computer and they're doing illegal things online. He ...
Inquiry0033's user avatar
1 vote
3 answers
7k views

Malware Suddenly Uploaded To My Website! [duplicate]

This is my first question here on the IT Security section of Stack Exchange, so if there is any problems with my question I apologize. Basics Suddenly Google says that my website contains Malware! ...
vallentin's user avatar
  • 153
3 votes
2 answers
3k views

A process called ./watchbog is mining crypto currency in our server. How do I stop it? [duplicate]

I have found this question below but I need some more clarification that's why I am writing again. I have a process called “watchbog” that is completely hogging my CPU and I don't know what it is ...
Sayantan Das's user avatar
0 votes
1 answer
5k views

Command & Control Server List [duplicate]

I recently got an email from my ISP saying that they'd detected traffic to a known Command & Control server from my home. Boo. I'm sure this probably means one of our computers has some awful ...
Joel B's user avatar
  • 109
2 votes
1 answer
2k views

Can you get rid of the ZeroAccess botnet without a complete reinstall? [duplicate]

I'm interested in the recommended course of action for when you find a (Windows) system infected with the ZeroAccess botnet. I've seen various blog posts online recommending that the user download ...
JMK's user avatar
  • 2,516
1 vote
2 answers
939 views

How to know if a host has been compromised and re-secure it again? (particular case of a raspberry) [duplicate]

I'm running a raspberry PI and I've accidentally left the 22 port open to it from a public IP for about 24 hours. Raspberries' raspbian distro comes by default with a "pi" user and "raspberry" ...
knocte's user avatar
  • 161
6 votes
1 answer
2k views

I have a process called “watchbog” that is completely hogging my CPU and I don't know what it is [duplicate]

This process that has come out of nowhere is hogging my CPU and I have no clue what it is or how to get rid of it. You can see in the image below what it's doing: What is this process? How can I get ...
Anthony Frizalone's user avatar
-2 votes
2 answers
2k views

Is it safe to use a computer for banking etc after you have removed a virus from it? [duplicate]

So one of my laptops had a virus recently. I managed to remove it by running my computer in safe mode and then running my Antivirus software (norton). My laptop appears on be running fine now. ...
IT_User's user avatar
  • 212
0 votes
1 answer
3k views

How can we find out the fully undetectable virus and kill it in our computer? [duplicate]

As I know, most hacker can crypt the virus to bypass all antivirus. Even famous antivirus like kaspersky and avast doesn't know it. So, is there a good way to find out the FUD virus and protect from ...
ronaldtgi's user avatar
  • 1,195
5 votes
2 answers
750 views

How to evaluate the damage after being hacked [duplicate]

It's well known what measures one should take to prevent hackers from hacking their PC. But are there any steps that allows a user to evaluate the damage done by a hacker? Say that I know for sure ...
HSN's user avatar
  • 1,218
-2 votes
1 answer
3k views

how to avoid change file extension from index.html to index.html.bak.bak on a2hosting [duplicate]

My hosting server is getting infected by a malware. It renames my index.html to index.html.bak.bak how can i stop it?? Even after changing all passwords and removed all malicious code, next day again ...
user3388438's user avatar

15 30 50 per page
1
2 3 4 5
11