directories in /home/admispconfig/ispconfig renamed?
Hello,
Today I logged into my server as normal to run a few commands, and I discovered that the directories that reside within /home/admispconfig/ispconfig have been renamed to impossible names. The only two files in there are named "n" and "tempý?w?l". The interesting part is that neither one of them can be renamed (I'm assuming because of the question marks), and the file(directory?) "n" cannot be cat'ed either.
The first thing that entered my mind was perhaps the server was hacked, but after checking through the logs and running chkrootkit which I compiled myself right before I used, I am still clueless. Everything else appears to be in order as well.
The system is running Debian Sarge 3.1 and has ISPConfig 2.2.11 installed.
Posts: 31,911
Thanks: 693
Thanked 4,198 Times in 3,213 Posts
I've not seen this yet. Do you know when this happened. Maybe you can have a look at the lofile from the ISPConfig httpd server if you find any strange activity.
All the log files look normal and are from the address of my router. The only thing I can think of is that directory is where some of the webmail componets were stored, which I used frequently up to a couple of days ago when I began to use kmail. Still though, I have no idea how that happened. Fortunately I have backups of everything important, so if a reinstall is needed it won't be too bad, I'll only lose some stats.
Posts: 31,911
Thanks: 693
Thanked 4,198 Times in 3,213 Posts
If only directories in /home/admispconfig/ispconfig are not okay, you can try to download the latest ISPconfig version and install it, it will upgrade your ISPConfig installation and will most likely repair the problem without data loss or the need to reinstall everything.
I'm glad you said that . As I was sitting in class the same thing dawned on me and I raced home to ask, but it was allready answered. Everything else runs fine on the server, and appears to be unaltered. Like I said, I am running 2.2.11 allready. So my question now becomes, would the installer let me do that since it detects the version and performs an automatic update?
Recent comments
23 hours 47 min ago
1 day 4 hours ago
1 day 9 hours ago
1 day 11 hours ago
2 days 1 hour ago
2 days 1 hour ago
2 days 6 hours ago
2 days 13 hours ago
2 days 13 hours ago
2 days 15 hours ago