Link to home
Start Free TrialLog in
Avatar of *** Hopeleonie ***
*** Hopeleonie ***Flag for Switzerland

asked on

Cleaning infected Linux server

Hi
 
one of our customer has a Newsletter server, that is infected. Do you know a service, that we can clean it for a good price?

Thanks

ASKER CERTIFIED SOLUTION
Avatar of Deepak Sharma
Deepak Sharma
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of *** Hopeleonie ***

ASKER

Hi Sharma
the customer did not tell the OS info. In online scans I see this information:

User generated image
User generated image
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
@David Johnson, CD

http://001ofasecond.com/

User generated image
Customer can't wipe/reload restore Server.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
why can't they install a newer version of wordpress, reinstall plugins  and revert their database?
@Scott Silva
Because that the customer is searching security experts to clean.
We can't help the customer.

@David Johnson
This is not WordPress. It is a Mail server.
They told backups don't exist. :)
The software can't be installed again.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
@Scott Silva
All Software are up to date. If you create a new Server or reinstall, the customer will lose the Newsletter software licence. Think they did not update the OS. SiteGuarding can clean the Server they told & we get protection for one year.

User generated image
@Scott Silva, skullnobrains & noci
Would you choose SiteGuarding? They do a human analyse & are Experts.
They told they will clean the server & remove from blacklistings.

I don't see a lot of negative reviews, but that is easy to fake... If they are a legitimate company, go for it...
Hopefully they aren't a scammer... I have personally not heard of them.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I recommend a FULL cloning of your system before you let someone you do not know get into it...
I still haven't seen why they think it is infected.
What are the symptoms they have experienced?
IE... What is happening that they assume it is infected?
Is it spamming?
Is it encrypted?
Looking at their (siteguarding) website it does look like a typical scammers page...
Almost word for word looks like all the others...
I don't think I trust it...

Avatar of skullnobrains
skullnobrains

same here. no clue regarding whether it is actually infected.

first time i hear of siteguarding. they look at best like a company that will run a bunch of mildly effective tools with zero human thinking. worst case scenarios are far beyond scam or incompetence. my personal trust level it a little below zero.
@All
I told every feed back to the customer. Waiting till they decide.

@Scott Silva
IE... What is happening that they assume it is infected?
Is it spamming?

They are blacklisted
https://www.virustotal.com/gui/url/04d6c8ac987be958f394588a391f5a8bdc10caa710a04e27192bf285e99d4b23?nocache=1

User generated image
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
@Scott Silva
Thanks also forwarded your questions to the customer.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
According to all recommendations we reinstalled the server.

@All
Thanks a lot