Recent content by handyphil

  1. H

    help! webserver compromised, serving paypal phising. Can't find source

    unfortunately its a rented server at a datacenter, I don't have physical access so I just asked them to re-image it. I couldn't find anything, and the cracker even firewalled my home ip off my own box at one point, lol
  2. H

    help! webserver compromised, serving paypal phising. Can't find source

    ugh can't figure out it just scrapping it
  3. H

    help! webserver compromised, serving paypal phising. Can't find source

    I will be scrapping it, but I feel determined to discover how my server was hosting these files that I can't find have scoured all conf files and I have no references to webscr or cmd-confirm the login.php file does not exist either according to locate. can a linux virus make files...
  4. H

    help! webserver compromised, serving paypal phising. Can't find source

    I will be scrapping it, but I feel determined to discover how my server was hosting these files that I can't find have scoured all conf files and I have no references to webscr or cmd-confirm the login.php file does not exist either according to locate. can a linux virus make files...
  5. H

    help! webserver compromised, serving paypal phising. Can't find source

    I received several urgent emails from my webhost today saying I was hosting paypal phishing content and to immediately remove it. Sure enough the content was there. I replaced my domain with *'s but the urls were : http://***.com/cgi-bin/webscr/?login-dispatch...
  6. H

    help! webserver compromised, serving paypal phising. Can't find source

    I received several urgent emails from my webhost today saying I was hosting paypal phishing content and to immediately remove it. Sure enough the content was there. I replaced my domain with *'s but the urls were : http://***.com/cgi-bin/webscr/?login-dispatch...