Thursday, October 29, 2009

Weird stuff going on.

Weird stuff is going on on my server. Strange folders with strange scripts appeared. I have emailed the support desk at Hostingmatters. Stay tuned!

Update: it was the Chinese. So that's the thanks I get for all the money I spent at Walmart... Anyway, to celebrate the matter being resolved, I have updated the theme for this site. Yays to the pretty!

7 comments:

Candle said...

I didn't do it!

Andrea said...

Your fervent protests have awakened my suspicions! >:{}

Candle said...

Having been on the receiving end of a hack to a server farm I ran some years back, you may want to look everywhere for hidden directories. On a unix system, you'd just do a "ls -a", and on a windows system you'd go to like "view->folder optinos" and click "show hidden files" or whatever its called. The reason I bring this up is that 'hackers' do not hack for a reason - either they want to use your system to jump to another, or they want to store cracked software or music on your system. In my case, they were running fake porn sites to get credit cards :)
If I'm way, way off base in my comment then my apologize - that's what I get for coming in 1/2 way.

Andrea said...

Thanks -- I haven't heard back from my hosting people yet, so I don't know what exactly those folders are, but it's never happened before. I chmod'ed everything in them to 0 permissions -- if I don't hear anything else I'm just going to delete the folders.

Candle said...

Cool, ya you gotta keep hounding them. Squeeky wheel and all :)

Other things you can try:

finger (find out who'se been on)

w (the command is literally 'w' - shows who is on right now, what they are doing)

last -5 (shows the last 5 people who have been on. Can do any number)

The problem with these 3 things is that if your 'wtmp/utmp' files have been compromised, these commands won't show anything. Anyone with a decent root kit could have hidden their tracks, but they may just be dumb script kiddies and might not have cleaned up after entry.

Goodluck, I will now stop making a fool out of myself and slip back into....oh no....its coming upon me...erg...capitalism...hegemony... toxins...eeeeeek...

Candle said...

Those dang Chinese huh?

Andrea said...

Yah really! See if I buy any more of their cheap lamps.