Re: [Full-disclosure] Files keep appearing

["Adriel T. Desautels" <adriel@xxxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Stephen,
    I can help you if you are interested. Let me know.

Stephen Johnson wrote:
> I keep having a phishing website appear on my web server.
>
> They keep showing up in a Resources folder of one of the sites that
> I host. I have gone through the logs and I am not seeing any
> connections.  I deleted the files this morning and this evening
> they re-appeared ? no connections were made on my server during
> that period of time.
>
> Also, there are no cron jobs that I noticed that looked out of the
> ordinary.
>
> I am running MySQL, PHP, Apache2 on a debian linux server.
>
> Any thoughts?
>
>
> ----------------------------------------------------------------------
>
>
> _______________________________________________ Full-Disclosure -
> We believe in it. Charter:
> http://lists.grok.org.uk/full-disclosure-charter.html Hosted and
> sponsored by Secunia - http://secunia.com/


- --


Regards,
    Adriel T. Desautels
 
    Chief Technology Officer
    Netragard, LLC. || http://www.netragard.com
    PGP KEY ID      : 0x7B6F2284
    -------------------------
    "We make IT secure."
 
            *** NOTICE ***

    Please do not email sensitive information to
    this email address using clear text email.
    Please encrypt all sensitive information prior
    to transmission. To obtain my PGP key please
    browse to the URL below.

 http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x7B6F2284

            *** NOTICE ***
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
 
iD8DBQFEf8Bd4fEyMUBMiWwRAl7NAKDd7I80knmnpmXPPYmMdIZ4knOAvwCgjN4q
2Pfq3T+vcHxMUsBmSCIL1dM=
=u5/I
-----END PGP SIGNATURE-----




BullGuard Anti-virus has scanned this e-mail and found it clean.
Try BullGuard for free: www.bullguard.com


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/