Emergency Server issues and I feel stranded and alone!

Hello,

I have a deal with a company who provide 24/7 support, backup solutions, and sysadmin work.

I also have a server with managed.com

Recently I got an email from managed complaining about the server sending pings left right and center to 1 server.

I then got the company to get a sysadmin to take a look. He saw that it was occuring from a Cpanel username Demo. He noticed all over the server their was IRC bots, Egg something, and bitchx stuff. He found suspect files in

./tmp/
./var/tmp/
./usr/tmp/
./home/
./var/cpanel/Counter/
./var/spool/mail/
./home/virtfs/

"All the files (eggdrops, ircbots, psybnc, bitchx )were deleted"

However now Cpanel, SSH, WHM, EMail, and many other things does not work. He says that the ./bin/ dir has "crashed" and that the only way to fix it is by rebuilding the server. When I login to SSH under and username or password it says "Access Denied". When users login to Cpanel it goes to a blank page or "Server Problem"

He says I should contact managed.com. I have done so, however I just found out I can not send emails or recieve (Even though it logins). I therefore attempted to ring them up, however I only go through to an answer machine even though they are meant to be open (2pm PST and they close at 6pm PST).

What are your thoughts and what should I do. My main concern is clients data.

He claims that terminating the demo account caused this, however I doubt that much damage can occur on a restricted account. (And I dont even know where it came from).

Kind Regards,

James Parmee Morris
WebspaceUK.com

 

 

 

 

Top