Linux Server Technician - Server Compromised

IN PROGRESS
Bids
32
Avg Bid (USD)
$95
Project Budget (USD)
$30 - $250

Project Description:
I have had my Linux dedicated server compromised and my hosting company said i must investigate. They have given some suggestions but i need a server specialist to work on this. If i find the right person i will always use you to maintain the server as ongoing.

I need to find out what happened on my server and how it happened so i can prevent it in future. The host said lucky it was at user level but couldn't tell me what user it was under.

I need to do this asap so please let me know when you can start and after i check all your details i will give the password details.

This is what i got from hosting company

====================================================

Thanks for your time on this phone this morning. As discussed, you are going to have one of your technicians take a look at your server and the current compromise.

As mentioned, you can find some information in files in the directory specified in this ticket and also the /root/tmp directory and /tmp directory. Please note that if the compromise is detected as running again, to protect the integrity of the network, we will need to stop your server until you are able to take immediate action to prevent the compromise from running again.


We believe that your server has been compromised. One of our techician will give you a call shortly to discuss.

The suspicous files are located on:

/tmp/dor.jpg
/var/tmp/fl.jpg.16
/var/tmp/fl.jpg.19
/var/tmp/fl.jpg.3
/var/tmp/fl.jpg.4
/var/tmp/fl.jpg.6
/var/tmp/fl.jpg.10
/var/tmp/fl.jpg.9
/var/tmp/fl.jpg.8
/var/tmp/fl.jpg.23
/var/tmp/fl.jpg.22
/var/tmp/fl.jpg
/var/tmp/fl.jpg.12
/var/tmp/fl.jpg.15
/var/tmp/fl.jpg.18
/var/tmp/fl.jpg.7
/var/tmp/fl.jpg.14
/var/tmp/fl.jpg.5
/var/tmp/fl.jpg.1
/var/tmp/fl.jpg.13
/var/tmp/fl.jpg.17
/var/tmp/fl.jpg.20
/var/tmp/fl.jpg.21
/var/tmp/fl.jpg.2
/var/tmp/fl.jpg.11

Please investigate this further.

Skills required:
Linux, PHP, Script Install, System Admin, Web Security
Hire factory99
Project posted by:
factory99 Australia
Verified
Public Clarification Board
Bids are hidden by the project creator. Log in as the employer to view bids or to bid on this project.
You will not be able to bid on this project if you are not qualified in one of the job categories. To see your qualifications click here.