Attacking problem
I am hosting an account for some, and he emailed me this.
=========
Yesturday, I finally found this guy target a file name
"~httpdocs/BBS/junshi/gbsvtmp.txt"
so that this file can't be deleted or rewritten.
If he renames this file, a new file will be generated
automatically. The result is that my forum's main
page becomes blank. Obviously, it is done by a virus
kind of program.
After I modified my program to avoid using that file,
This guy changed the virus program to constently
delete a file named
"~httpdocs/BBS/junshi/gbcurrent.html"
so that my forum page becomes "not exist".
==========
How do I track/trace the attack and delete the "virus" program?
