Suspicious directories created in website folder

Discussion in 'General' started by scarpelius, Aug 11, 2014.

  1. scarpelius

    scarpelius New Member

    I've added a cron job to a website and I've noticed after the creation of the cron several directories (bind, dev, etc, lib, lib64, usr, var) created in the website folder as you can see in the image [​IMG].

    I've manage to delete the content of the the respective folders but i cant delete the folders.

    Is this a feature in ispconfig? And if it is, why copy those folders and executables in there?
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Thats the jail of a ssh user of that website or of a cron job of this website, so nothing souspicoius.

    This was not a good idea. This destroyed either a cronjob or ssh account of this website. I hope you made a backup of all files and folders so that you can restore it.
  3. scarpelius

    scarpelius New Member

    Those directories were not there before making the cron, so I havent lost anything.

Share This Page