Our server has been compromised - I am crying for help
I hope you are in the best of your spiritual and physical health.
I have a Red hat linux server from http://www.servermatrix.com. The load on our server is very high these days and our online forum (8500 + members) goes offline a number of times everyday. This is resulting in thousands of visitors turning away. We checked the server status and found that disk sda3/(var) is 100% full. Servermatrix.com opened a ticket to tell us that there are some malicious files and a trojan horse in /tmp. When we checked "Manage Mail queue", we found that there are more than 1 lac messages. These emails are sent to nobody@mohammadirfan (mohammadirfan is our server name).
I dont have much technical knowledge and I cannot do much. My friend used to manage this server for us but he is on holidays. I cannot sleep these days. One question comes in my mind that is the hacker or spammer reading the emails sent from/to our server or he is just sitting in /tmp with his malicious files. I am crying for help. What should I do?
