Got hacked - need help

[ehmotion]

I'm guessing I'm not alone here since all of eleven2's servers got hit. All my index pages were deleted or rreplaced. How do I go about replacing my pixelpost index page? Is it the index.php file?

Please help.

Thanks,
Justin

[GeoS+]

Yes,
main page of Pixelpost is /index.php. Replace it with oryginal one (form ZIP archive) and then contact with e2 about reason of attack (where was security backdoor). If you get this date Ill be glad to get PM with it.

It's not so that all of their servers were hacked, server #11 was hacked
but I know that this is no relief for those who were hacked...
I have 2 domains at another server, fortunately...

I encountered the same situiation 2 weeks before with another hoster

you should do the following:

In ALL, really ALL directories the index-files are compromised:

So:

index.htm
index.html
index.php
index.shtm
index.shtml

as well as any possible version of

default.htm ....

this depends on the server - configuration...

you must restore all these files in all your directories / subdirectories
I hope you have a backup ???

it is extremely necessary to have a backup of your files.

Mostly one user on one of these servers manages to get enough rights to hack other domains on shared servers...


I will never understand this misused creativity of these stupids...