If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)

Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Virus Alert!

rogue-entity · 2005-12-04 15:55:15

This is a virus alert with a twist. One of the Linux servers that I maintain was infected with the "LINUX/PsychoFor" virus. The virus infected the machine through the webserver. The machine was running Debian Sarge, Apache 2.0.54 and PHP 5.0.1 The infection got worse when I restarted the server, the virus hyjacked port 80…

04-12-2005 3:55pm

#1

rogue-entity

Registered Users, Registered Users 2 Posts: 1,664 ✭✭✭

Join Date: July 2005

Posts: 1586

This is a virus alert with a twist.
One of the Linux servers that I maintain was infected with the "LINUX/PsychoFor" virus. The virus infected the machine through the webserver. The machine was running Debian Sarge, Apache 2.0.54 and PHP 5.0.1

The infection got worse when I restarted the server, the virus hyjacked port 80 and setup a backdoor. The system has been restored from a backup and all is now well. I would suggest that anyone using these software versions, apply the latest security patch.

Will this may be the first time many of you have ever heard tell of Linux servers getting hacked, it does happen although rarely. Look out for files/services called "caralho"

0

Comments

#2 05-12-2005 5:15pm

Martyr

Closed Accounts Posts: 1,567 ✭✭✭

Join Date: November 2001

Posts: 1391

You're lucky it wasn't something more sophisticated, like a rootkit.

0