Mysterious folder renaming to: DWDDXX3.DDD
On Sept-6 my websites on my VPS account stopped working. When I got in touch with the help desk at the hosting company it turned out that my public_html folder had been renamed to DWDDXX3.DDDThe help desk renamed the folder back to public_html and the account started working again.
Today I realised my sites aren't working again, and managed to log in to WHM, used that route to open up a Cpanel view of one of the websites, looked at the folder usage and found some folders called DWDDXX3.DDD
I'm trying to figure out the best way forward. Does anyone know if this is symptomatic of a particular kind of hacking? I figure that my passwords could have been compromised, the server has been hacked, or that I am inadvertently running some compromised scripts somewhere in my account.
My plan is to get the hosting company to delete the entire account and start a new one which I will create from scratch, with new passwords.
Does anyone have any thoughts on this please?