directadmin compromised with spam - LOCALRELAY

Closed Posted Nov 16, 2015 Paid on delivery
Closed Paid on delivery

We got server which has been compromised, and its really cat and mose game all day to remove added files which is sending mails all day.

Already moved several domain (HTML only) to other user , and added htaccess to prevent php from tunning in there.

also secured [url removed, login to view] by disabling eval , but still its showing up all day in new files on the several domains > eval(base64_decode

All user and root passwords already have been changed, but its seems they got a backdoor i cannot find.

Hope somebody with good skills can help me fix this problem.

Internet Security Linux Red Hat System Admin Web Security

Project ID: #8912850

About the project

18 proposals Remote project Active Dec 23, 2015

18 freelancers are bidding on average $78 for this job

sabdsouza

A proposal has not yet been provided

$100 USD in 3 days
(116 Reviews)
6.5
odessky

Hello! I have right skills and great experience for working on your project. I very fast and competent. You may show reviews at my profile.

$150 USD in 5 days
(127 Reviews)
6.3
usuf001

A proposal has not yet been provided

$110 USD in 1 day
(52 Reviews)
5.1
mihajlol

I have big experience in web hosting, security and web development. I was owner and system adminisrator of two big hosting company. Had more then 50 servers and 1000 domains. I had about 300 clients around the world. T More

$100 USD in 3 days
(14 Reviews)
4.0
pdq

Hi, i'm a currently working in a datacenter as a linux servers administrator, so i believe my skills are quite enough to solve your problem. Can i ask some questions? What was compromised server OS? what files did you More

$55 USD in 1 day
(5 Reviews)
2.4
xaviersayuj

I can get this fixed for you. It could be done due to the vulnerabilities of the application installed on the domains, we can upgrade it to the latest version to resolve them

$55 USD in 3 days
(8 Reviews)
2.3
Trle94

Hello sir, I could help you out removing hacker's access from your server and stopping those email spams. Feel free to contact me for help, I'm free for work!

$50 USD in 3 days
(6 Reviews)
2.5
AndreiGSQ

Hello there, I am a linux and coffe master. Working for the past 7 years as System Administrator, Network Engineer, Hosting Security Advisor and Sales / Support Manager with big datacenters in Romania and Germany; More

$57 USD in 1 day
(2 Reviews)
1.8
hoanganhhungvp

Hi, Im ready for this job. I have good experience web deverlopment and eCommerce. I pass Academy of Cryptography Techniques (Vietnam), with cetificate Information of Sercurity. With your project, i was make a focus More

$83 USD in 1 day
(1 Review)
1.5
riba5

i have great experience in cleaning compromised websites as I worked as server admin in a webhosting company, where I had to deal with compromised websites on a daily basis, I also wrote several little scripts to help More

$66 USD in 1 day
(0 Reviews)
0.0
vargolici

Hi I'd need to look at the logs and figure what exactly is being run at the moment the mails are sent. Tell me how you'd like for me to login in that server, either over teamviewer from your system, or some other w More

$50 USD in 1 day
(0 Reviews)
0.0
Vshinde

Let us get going and find out the trojan causing the issue. 2 days max if i am not able to find it will do it for free.... don't pay me ;) . Yes but just one thing i hope it is not windows based system . Please igno More

$83 USD in 3 days
(0 Reviews)
0.0
vinnie6669

I am a Linux admin have more then 5 years of experience in this field. I worked in webhosting industry and manage datacenter from remote. I also have experience working on AWS and Google cloud. I will find the blockdoo More

$83 USD in 3 days
(0 Reviews)
0.0
arslaanshaikh

Hi i am a system administrator and have a very good experience in the field. New to freelancer though. But let me have a look at your server for a solution. Final bid shall be placed after i review your server.

$50 USD in 3 days
(0 Reviews)
0.0
markusikkk

I have ten years of experience in the administration of hosting servers based on DirectAdmin and cPanel. I can take a job on the spot. The entire operation, including the treatment server should take a few hours.

$50 USD in 1 day
(0 Reviews)
0.0
chainmail

Hi, I know the problem you have, and I have hjad to resolve it for other sites/servers. I will need some access to the server. first thing will be an open and honest communication between us of the symptoms and the More

$66 USD in 3 days
(0 Reviews)
0.0
tocode

1. install mailscanner (anti spam and anti virus) 2. force all port 25 through this mailscanner for outgoing. 3. install fail2ban and enable SASL auth checking

$83 USD in 3 days
(0 Reviews)
0.0
harrytang

we selling hosting with directadmin, so we know very well about DA, please let me help you. thanks

$100 USD in 3 days
(0 Reviews)
0.0