I have a problem with a webserver that runs Centos4 with DirectAdmin.  Since a few weeks some websites hosted on it are not redirecting on search engines properly, they are redirected to some malware site, resulting in a ban from google.  Now I have used 3 virusscanners: ClamAV: Didn't find anything Bitdefender: Found a 2-3 files with JS infection, deleted them AVG: Finds lots of files, but doesn't have the option to clean!  The virus that it finds is: JS/Redir JS/Dropper  Still the strange thing is: website a (www.aa.com) does not have any infected files (have gone through all the files manually, is a custom PHP app, nothing special) but does still have the same virus. Website b (www.bb.com) does have the infected files as only one.  I deleted all these files and suspended the account, but no luck, still the same error.  I do get the log entries on the website from the searchengines so the DNS entries are not changed.  But now I have gone through the httpd files but cannot find anything.  Where can I start looking for this?
This is a  about Server Security - Responding to Breach Events (Hacking)   See Also:                  Canonical Version I suspect that one or more of my servers is compromised by a hacker, virus, or other mechanism:   What are my first steps? When I arrive on site should I disconnect the server, preserve "evidence", are there other initial considerations? How do I go about getting services back online? How do I prevent the same thing from happening immediately again? Are there best practices or methodologies for learning from this incident? If I wanted to put a Incident Response Plan together, where would I start? Should this be part of my Disaster Recovery or Business Continuity Planning?   Original Version       2011.01.02 - I'm on my way into work at 9.30 p.m. on a Sunday because our server has been compromised somehow and was resulting in a    attack on our provider. The servers access to the Internet   has been shut down which means over 5-600 of our clients sites are now   down. Now this could be an FTP hack, or some weakness in code   somewhere. I'm not sure till I get there.      How can I track this down quickly? We're in for a whole lot of   litigation if I don't get the server back up ASAP. Any help is   appreciated. We are running Open SUSE 11.0.            2011.01.03 - Thanks to everyone for your help. Luckily I WASN'T the only person responsible for this server, just the nearest. We managed   to resolve this problem, although it may not apply to many others in a   different situation. I'll detail what we did.      We unplugged the server from the net. It was performing (attempting to   perform) a Denial Of Service attack on another server in Indonesia,   and the guilty party was also based there.      We firstly tried to identify where on the server this was coming from,   considering we have over 500 sites on the server, we expected to be   moonlighting for some time. However, with SSH access still, we ran a   command to find all files edited or created in the time the attacks   started. Luckily, the offending file was created over the winter   holidays which meant that not many other files were created on the   server at that time.      We were then able to identify the offending file which was inside the   uploaded images folder within a  website.      After a short cigarette break we concluded that, due to the files   location, it must have been uploaded via a file upload facility that   was inadequetly secured. After some googling, we found that there was   a security vulnerability that allowed files to be uploaded, within the   ZenCart admin panel, for a picture for a record company. (The section   that it never really even used), posting this form just uploaded any   file, it did not check the extension of the file, and didn't even   check to see if the user was logged in.      This meant that any files could be uploaded, including a PHP file for   the attack. We secured the vulnerability with ZenCart on the infected   site, and removed the offending files.      The job was done, and I was home for 2 a.m.            The Moral   - Always apply security patches for ZenCart, or any other CMS system for that matter. As when security updates are released, the whole   world is made aware of the vulnerability.   - Always do backups, and backup your backups.   - Employ or arrange for someone that will be there in times like these. To prevent anyone from relying on a panicy post on Server   Fault.
How does delete[] know it's an array? Adding Layer Files (.lyr, .lyrx) to QGIS At college we use ArcGIS Desktop 10, but that does not function on my Mac so I have QGIS there instead.  I want to do my exercises with QGIS, but in ArcGIS Desktop we use .lyr files with ArcMap and .lyrx files with ArcGIS Pro, and they are not supported by QGIS.  Does anyone know, how I can connect the *.lyr files to my *.shp files to use them on my Mac with QGIS? How can I take a photo with everything in focus with my DSLR? I am quite new to DSLRs and one of the first things I noticed was the incredible focus points and appearance of depth that you can achieve. That is great in a lot of scenarios, but not in all. When filming a landscape as a whole, I do not want to have the focus on that single tree, but on the whole skyline.  Is there a way by which you can sort-of "disable" the focus, so that the raw image is recorded without any added blur? I suppose something as simple as this is only a small function you can turn off, but I can't seem to find it in the manual of my camera. Why do I have so many .Xauthority.* files in my home directory? How are the degrees of freedom in the emmeans package calculated? - R Show that any set in a metric space can be written as the intersection of open sets To find all $n$ such that $(n-1)!+1$ is a perfect power of $n$ How do I add newlines between lines printed on the command line? Mail logs are incredibly difficult to read. How could I output a blank line between each line printed on the command line? For example, say I'm grep-ing the log. That way, multiple wrapped lines aren't being confused. How long was Luke Skywalker's training with Yoda? Food in the Star Wars Universe? Are the foods in the Star Wars Universe the same as ours'? Do they have strawberries or potatoes or something? I know that they might have some food other than the food that we also have, but I'm wondering if they have any food like ours'. Why can't you use the keyword 'this' in a static method in .Net? I'm trying to use the this keyword in a static method, but the compiler won't allow me to use it.  Why not? How can I pass a class member function as a callback? I'm using an API that requires me to pass a function pointer as a callback. I'm trying to use this API from my class but I'm getting compilation errors.   Here is what I did from my constructor:  m_cRedundencyManager-&gt;Init(this-&gt;RedundencyManagerCallBack);   This doesn't compile - I get the following error:      Error  8 error C3867: 'CLoggersInfra::RedundencyManagerCallBack': function call missing argument list; use '&amp;CLoggersInfra::RedundencyManagerCallBack' to create a pointer to member   I tried the suggestion to use &amp;CLoggersInfra::RedundencyManagerCallBack - didn't work for me.   Any suggestions/explanation for this??  I'm using VS2008.  Thanks!! In PHP, the HEREDOC string declarations are really useful for outputting a block of html.  You can have it parse in variables just by prefixing them with $, but for more complicated syntax (like $var[2][3]), you have to put your expression inside {} braces.  In PHP 5, it is possible to actually make function calls within {} braces inside a HEREDOC string, but you have to go through a bit of work.  The function name itself has to be stored in a variable, and you have to call it like it is a dynamically-named function.  For example:  $fn = 'testfunction'; function testfunction() { return 'ok'; } $string = &lt;&lt;&lt; heredoc plain text and now a function: {$fn()} heredoc;   As you can see, this is a bit more messy than just:  $string = &lt;&lt;&lt; heredoc plain text and now a function: {testfunction()} heredoc;   There are other ways besides the first code example, such as breaking out of the HEREDOC to call the function, or reversing the issue and doing something like:  ?&gt; &lt;!-- directly output html and only breaking into php for the function --&gt; plain text and now a function: &lt;?PHP print testfunction(); ?&gt;   The latter has the disadvantage that the output is directly put into the output stream (unless I'm using output buffering), which might not be what I want.  So, the essence of my question is: is there a more elegant way to approach this?  Edit based on responses: It certainly does seem like some kind of template engine would make my life much easier, but it would require me basically invert my usual PHP style.  Not that that's a bad thing, but it explains my inertia..  I'm up for figuring out ways to make life easier though, so I'm looking into templates now. I am trying to understand capitalization rules with Mom and Dad. I believe I have it correct below, but please let me know if I do not.     The one thing I learned from my dad was that it was good to earn the trust of one's children. Dad has shown me how good that a dad can be. One day when I went to his house, and Dad wasn't there, I ran outside....   The above passage is just made-up just so that you would see what I mean about capitalization. Let's put numbers by each one, like so:     The one thing I learned from my dad(1) was that it was good to earn the trust of one's children. Dad(2) has shown me how good that a dad(3) can be. One day when I went to his house, and Dad(4) wasn't there, I ran outside....    This is one where I'm not certain. I believe in this sense I'm showing possession here with "my", and it just didn't seem right saying "my Dad". I don't know what the grammar rule is here, or if I even have it right. This one is obvious—it starts the sentence. In this case, I'm using Dad like a name instead of saying "Larry". Therefore, it should be capitalized. Again, just like 3. How can I make my typing "stick" to box side? Where do I ask questions about the Windows operating systems? Be it Win 8, 7 or XP.  The questions that I want to ask may not be strictly related to a problem I am facing, but related to files and features of the OS itself or asking just because of my curiosity. For example, I want to know the purpose of the file "Bootvid.dll" in a Win 8 OS.  Or, for example, I want to what "hal.dll" is.  Are these questions appropriate for Stack Overflow or Super User? If not, please recommend some SE sites in which I can post such questions, because I am interested in getting into the guts of the Windows OS. Open to all suggestions. After my , I've now got a new suggestion: down votes should not have any side effect in meta.  By side effects, I mean something like banning me from asking questions due to too many down votes, which I am experiencing right now:     states that I am permanently banned unless I improve my standing by posting some quality answers.  Seriously, I'm new to the site, and thus I'm not capable of posting quality answers on Meta.  So my only refuge was to create a new account. I think this check for previously downvoted posts should be disabled on Meta. There are a lot of poorly drawn schematics here. A few times people have actually asked for critiques of their schematics. This question is intended as a single repository on schematic drawing rules and guidelines can point people to. The question is  What are the rules and guidelines for drawing good schematics?     Note: This is about schematics themselves, not about the circuits they represent. Would it be possible to have a "community accepted" feature? Extended Rigid Bodies in Special Relativity I was reading Landau &amp; Lifshitz's Classical Theory of Fields and I noticed that they mention that an extended rigid body isn't "relativistically correct".   For example, if you consider a rigid rod and apply a torque at one end, by definition of being rigid, the whole body must start rotating at the same instant. But the information about the force being applied cannot travel faster than the speed of light.   The book hasn't mentioned how to resolve this paradox, and after thinking about it for a while, I'm wondering if one can even define a rigid body in a relativistically correct manner.  To summarize: How does one define a rigid body in special relativity?