DirectAdmin Centos4 server has virus I have a problem with a webserver that runs Centos4 with DirectAdmin.  Since a few weeks some websites hosted on it are not redirecting on search engines properly, they are redirected to some malware site, resulting in a ban from google.  Now I have used 3 virusscanners: ClamAV: Didn't find anything Bitdefender: Found a 2-3 files with JS infection, deleted them AVG: Finds lots of files, but doesn't have the option to clean!  The virus that it finds is: JS/Redir JS/Dropper  Still the strange thing is: website a (www.aa.com) does not have any infected files (have gone through all the files manually, is a custom PHP app, nothing special) but does still have the same virus. Website b (www.bb.com) does have the infected files as only one.  I deleted all these files and suspended the account, but no luck, still the same error.  I do get the log entries on the website from the searchengines so the DNS entries are not changed.  But now I have gone through the httpd files but cannot find anything.  Where can I start looking for this?
How do I deal with a compromised server? This is a  about Server Security - Responding to Breach Events (Hacking)   See Also:                  Canonical Version I suspect that one or more of my servers is compromised by a hacker, virus, or other mechanism:   What are my first steps? When I arrive on site should I disconnect the server, preserve "evidence", are there other initial considerations? How do I go about getting services back online? How do I prevent the same thing from happening immediately again? Are there best practices or methodologies for learning from this incident? If I wanted to put a Incident Response Plan together, where would I start? Should this be part of my Disaster Recovery or Business Continuity Planning?   Original Version       2011.01.02 - I'm on my way into work at 9.30 p.m. on a Sunday because our server has been compromised somehow and was resulting in a    attack on our provider. The servers access to the Internet   has been shut down which means over 5-600 of our clients sites are now   down. Now this could be an FTP hack, or some weakness in code   somewhere. I'm not sure till I get there.      How can I track this down quickly? We're in for a whole lot of   litigation if I don't get the server back up ASAP. Any help is   appreciated. We are running Open SUSE 11.0.            2011.01.03 - Thanks to everyone for your help. Luckily I WASN'T the only person responsible for this server, just the nearest. We managed   to resolve this problem, although it may not apply to many others in a   different situation. I'll detail what we did.      We unplugged the server from the net. It was performing (attempting to   perform) a Denial Of Service attack on another server in Indonesia,   and the guilty party was also based there.      We firstly tried to identify where on the server this was coming from,   considering we have over 500 sites on the server, we expected to be   moonlighting for some time. However, with SSH access still, we ran a   command to find all files edited or created in the time the attacks   started. Luckily, the offending file was created over the winter   holidays which meant that not many other files were created on the   server at that time.      We were then able to identify the offending file which was inside the   uploaded images folder within a  website.      After a short cigarette break we concluded that, due to the files   location, it must have been uploaded via a file upload facility that   was inadequetly secured. After some googling, we found that there was   a security vulnerability that allowed files to be uploaded, within the   ZenCart admin panel, for a picture for a record company. (The section   that it never really even used), posting this form just uploaded any   file, it did not check the extension of the file, and didn't even   check to see if the user was logged in.      This meant that any files could be uploaded, including a PHP file for   the attack. We secured the vulnerability with ZenCart on the infected   site, and removed the offending files.      The job was done, and I was home for 2 a.m.            The Moral   - Always apply security patches for ZenCart, or any other CMS system for that matter. As when security updates are released, the whole   world is made aware of the vulnerability.   - Always do backups, and backup your backups.   - Employ or arrange for someone that will be there in times like these. To prevent anyone from relying on a panicy post on Server   Fault.
Suppose I am a naturalized citizen of the US, but also a citizen of another country, "XYZ". I then boarded a plane and left the US to another country (maybe not necessarily to XYZ), without first getting a US passport, but using my old, but valid XYZ passport.   In this case what would be the best documents to have for me to gain entry back into the US as a US Citizen without a passport?  Would I need to contact the US Embassy for help in order to be able return?  If the airline does let me aboard to return to the US, even without the US passport, what are the best documents could I show at the border to prove I am a US citizen but that I just don't have a passport, for whatever reason? How to scale a tikzpicture including texts? It seems that the scale option scales only the length of lines, but not the size of texts. For instance, 1 and true and not scaled in the following code.  \begin{tikzpicture}[thick, scale=0.6] \draw [dashed] (1,12) -- (11,12); \node[above] at (4,11) {1}; \node[above] at (8,11) {true}; \end{tikzpicture}   Could anyone tell me how to scale everything together within a tikzpicture? Thank you very much!  PS: It is a picture in a presentation with Beamer. sorry fresh user. I installed about 9 days ago and had issues with Unity disappearing which took 5 days of headaches to fix. It never did fix, I reinstalled.   I set up Plex (media server) and while the server is running and can be accessed by external network devices, I can't add files. Plex says this is because of permissions. I have gone up and down the forums here and at Plex to get an answer. It seems everyone says   chmod -R 755 /media/My\ Book/Videos   will change permissions to allow the folder "Videos" on my external USB 2.0 NTFS 3TB Western Digital drive (which is mounted and accessible through the file manager) as well as every sub-directory and file contained therein to be accessible to user "Plex".  I have used file manager and as soon as you click to change permissions it changes right back. When I chmod with -c it tells me every file is changed (usually 600) to 755 as I commanded it to do. I did   ls -l   to verify and there is no change. (I also used ls -l to make sure I knew who the owner was and it is me (mvl1014). ls -al gives me the same info.)  I swear to god I tried to sudo it and after smashing my head against this keyboard for basically the entirety of my day, I tried it as root. I was scared shi-less but couldn't come up with anything else. sudo su to root and then chmod -R -c /media/My\ Book/Videos  Same result. -c told me every single file was changed and a check in Unity or in terminal confirmed not a darn thing changed.  Now it seems to me that even if that isn't the thing stopping Plex from working there is still a problem with this command not going through.  12.04LTS -- on gen 1 i7 (2.7 GHz I believe) with 6 GB ram   I've attempted to attach a screenshot but I'm told I need 10 reps to do so, which means I'm copy/pasting too.  Please excuse my obfuscation, but Lorem Ipsum seemed unnecessary. And I tried multiple ways to format this but it looks perfect every way and messed up each time in the preview below. (Ugh, I'm a mess.)  $ chmod -R -c 755 /media/My\ Book/Videos  .....  .....  .....  mode of `/media/My Book/Videos/xxxx/xxxx/xxxx.mkv' changed from 0600 (rw-------) to 0755 (rwxr-xr-x)    ls -al shows:  mvl1014@FX6800:/media/My Book/Videos$ ls -al   total 88  drwx------ 1 mvl1014 mvl1014     0 Aug 28 15:17 .   drwx------ 1 mvl1014 mvl1014 20480 Sep  3 14:29 ..  drwx------ 1 mvl1014 mvl1014  8192 Aug 28 15:18 xxxx drwx------ 1 mvl1014 mvl1014 49152 Aug 16 14:02 xxxx drwx------ 1 mvl1014 mvl1014  8192 Aug 27 21:36 xxxx drwx------ 1 mvl1014 mvl1014  4096 Jul 23 19:09 xxxx   I apologize if this has been asked. I looked through this place plus at all the suggested "Similar Questions". The closet thing I got to an answer , but running the provided code with my own UID didn't work either. How to filter IPv4 and IPv6 addresses? Global hotkey in console application Device that makes metal malleable A mysterious app named &quot;10102&quot; shows up in my data usage. It bears only the standard Android app icon (the Bugdroid logo with a cube on its torso). From what the graph tells me, it has used 36 megabytes of data in the background and zero on the foreground. I think I haven't uninstalled anything for months. Is it malware? I haven't sideloaded anything and only authorized my laptop as a USB debugger. If it's malware, how do I remove it? I have no idea how to find its package name and 10102 isn't in the list of downloaded apps in settings. I'm running stock &amp; never-been-rooted Android 4.4.4 on Nexus 4. $[K(\zeta_n):K]=\phi(n)$? Is it true that $[K(\zeta_n):K]=\phi(n)$ where $\zeta_n$ be primitive root of unity and K be field of char zero?  I think it should be equal to the degree of cyclotomic polynomial which has degree $\phi(n)$.  Can someone please elaborate that what is the procedure for finite fields Are there perfect elastic collisions in Nature? QGIS Graphics Glitch after changing CRS Induction on a sum The left hand side has terms involving  $\binom{n}{m}= \dfrac{n!}{(n-m)!m!}$    $$1+\dfrac{1}{2}\binom{n}{1} +\frac{1}{3}\binom{n}{2}+...........+\frac{1}{n+1}\binom{n}{n} = \dfrac{2^{n+1}-1}{n+1}$$  I've done induction and proved $P(0)$ holds and also $P(1),P(2)$ holds (Just in case)  Now I've found $P(K+1)$ so the sum on the left is going to equal $\dfrac{2^{n+1}-1}{n+1}$ + $\dfrac{1}{n+2}$  and the right hand side is going to equal $\dfrac{2^{n+2}-1}{n+2}$  My problem is coming with the algebra though. I can't get those sides to equal. I can't get rid of the $n+1$ in the denominator.   Anyone have any ideas for me? They'd be much appreciated!  P.S. Someone gave me a hint and said that you can use the binomial theorem to solve this. Tractatus 3.333 and Russell's paradox Can anyone explain to a non-logician how Tractatus 3.333 refutes (or fails to refute) Russell's Paradox? Please explain his use of symbols! IndentationError: unindent does not match any outer indentation level When I compile the Python code below, I get      IndentationError: unindent does not match any outer indentation level     import sys  def Factorial(n): # Return factorial     result = 1     for i in range (1,n):         result = result * i     print "factorial is ",result     return result   Why? I work behind an really annoying firewall, and I just want the net admin to add all the SE websites to the whitelist. Right now I've lost access to Stack Overflow's authentication, but not Meta's... so I have to come here before I log in there.  It's driving me nuts. Basically I just want to add an exclusion rule for all SE domains; not only the website domains, but also the content domains such as gravatar.com, quantserve.com, the domain that holds static content, etc... For each positive even integer $n$, set   $$P_n = \displaystyle {{n} \choose {\frac{n}{2}}}\frac{1}{2^n}.$$  Show that $\displaystyle \lim_{n \to \infty} P_n$ exists and determine its value.   Here's what I have so far: each $P_n$ can be thought of as the probability of tossing a fair coin $n$ times, and obtaining exactly $\frac{n}{2}$ heads. My expectation is that $P_n \to 1$, since in any large trial, one would expect to record just about as many heads as tails. But I'm not sure how to mathematically justify this hunch.  Hints or solutions are greatly appreciated. This is probably a silly question but I need some help. I opened a file that I've been working on for about a month in the new 2.8 version of Blender. However when I tried to reopen the file in version 2.79, the scene is completely empty. Here is where the problem lies for me, I accidentally saved over the original file save while in version 2.8 . Please help. Thanks! What's the difference between importing and extending a class? Should north, south, east and west be capitalised? Should cardinal points be capitalised? Please give a reason why they should or should not. How to hide "Share", "Copy Link", "Copy to" buttons in my site? I'm using SharePoint Online modern UI.  And, I want to hide Quick edit, Sync, Export to Excel, PowerApps, Automate, Share, Copy Link, Copy to from my site.  Please check below picture.     I found the easy solution about PowerApps, Automate, Sync buttons in below URLs.        But I can't find solution other buttons. I don't want to use SPFX if possible, but is there no choice to use SPFX? Creating fillable PDFs I'd like to create a LaTeX document that when rendered into PDF, has forms that can be filled out using Adobe Reader or other such programs. Then I'd like to be able to extract the data. I deliberately would like to avoid using Acrobat for all the usual reasons (non-free, need different versions for different platforms etc).   Can this be done ?