View Single Post
Old 23rd January 2010, 19:05
till till is offline
Super Moderator
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 37,015
Thanks: 840
Thanked 5,652 Times in 4,461 Posts

Install rkhunter:

and run:

rkhunter -c

I had checked all my crons, but i didn't see any suspicious... maybe is a bug of ISP config, i don't know.
Possible of course but not that likely as there are no known bugs. Check your logs if someone loggs in with ftp or ssh. Do the sites where the pages get modified have anything in common e.g. the same cms installed in the site. Have you updated your phpmyadmin, there was a bug some months ago which was used to infect servers. Also do you had all updates of your linux distro installed?
Till Brehm
Get ISPConfig support and the ISPConfig 3 manual from
Reply With Quote