unknows scripts are running the server

[Swapana Ghosh]

Hi

>>Did you wipe & reload the OS after the box was compromised?  If so, did
>>you close the hole that allowed the crackers in?

No we did not reload the OS after the server was compromised..Basically the
server is in a different place and we work with remote..

Both the servers are patched with the latest patch..

Tobe very frank we could not find out the *hole*, through which the crackers
came into.. But phpnuke is running at the server.. And those crakers corrupted
all our sites basically. So we are assuming that they enter using
apache/php/phpnuke....

It will be very much helpful if you suggest what we can do? OS update is not
possible for us as i mentioned.. Except that if anything we can do that will be
really helpful...

Thanks and regards..

__________________________________
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/