unknows scripts are running the server

[Bruce Marshall]

On Friday 21 November 2003 12:46 pm, Swapana Ghosh wrote:
> Tobe very frank we could not find out the *hole*, through which the
> crackers came into.. But phpnuke is running at the server.. And those
> crakers corrupted all our sites basically. So we are assuming that
> they enter using apache/php/phpnuke....
>
> It will be very much helpful if you suggest what we can do? OS update
> is not possible for us as i mentioned.. Except that if anything we can
> do that will be really helpful...

Your box has been cracked....   other boxes on the network have been 
cracked too..   Without a complete reload, everything will always be 
suspect.



-- 
+----------------------------------------------------------------------------
+
+ Bruce S. Marshall  bmarsh at bmarsh.com  Bellaire, MI         11/21/03 
14:21  +
+----------------------------------------------------------------------------
+
"If there is a gun hanging on the wall in the first act, it must fire in
  the last." - Anton Chehkov, advice to a novice playwright.