Real Life: What happens when a server is compromised

[WestHoustonDem]

Got this note from my host this morning. By the time I got around to reading my email - the site was back up. I cannot afford a "premium" host. This host has very reasonable rates. But they know what they're doing.

5:30 am (3 hours ago)
The server that hosts your website (huron) was compromised early this morning. The hacker used an exploit in an old Gallery installation on one of the sites on the server to get root access. That site has been suspended and most of the files the hacker installed were removed. There are some files that are still suspect and it is in our best interests to reformat the server.


We are currently moving sites from the huron server to the delaware server. If you manage the dns for your site (i.e., don't use Verve Hosting's nameservers) you will need to update the dns for your site with a new IP address. Please send an email to support requesting your new IP address.


If you were using a remote mailserver for email, please send an email to support detailing what the mx records for your domain should be.


Please direct any questions regarding this move to support.

[Xenotime]

1. Update Update Update

Always apply patches and look for updates to software you are currently using. Sorry to hear about your problems and glad to hear you are back up.

[WestHoustonDem]

2. That's what I pay my host to do. They handled it perfectly.

My point is, that a good host handles problems quickly and professionally.

[Name removed]

3. Deleted message

Message removed by moderator. Click here to review the message board rules.