<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2745.2800" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>David, </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks for the response - I switch from the default
admin user to root and I could then create directories, etc.</FONT></DIV>
<DIV><FONT face=Arial size=2>I have managed to export the databases and pull
them down to my PC. Using SCP is a good idea - I will transfer key files
temporarily to another server.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Brendan</FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=David.Moss@fdmgroup.com href="mailto:David.Moss@fdmgroup.com">David
Moss</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=sussex@mailman.lug.org.uk
href="mailto:sussex@mailman.lug.org.uk">LUG email list for the Sussex
Counties</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Thursday, January 25, 2007 10:07
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> RE: [Sussex] Hacked server</DIV>
<DIV><BR></DIV>
<DIV dir=ltr align=left><SPAN class=850580610-25012007><FONT face=Arial
color=#0000ff size=2>sudo?</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=850580610-25012007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=850580610-25012007><FONT face=Arial
color=#0000ff size=2>or how about stopping the server and scp-ing the
whole DB to a local machine</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=850580610-25012007><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=850580610-25012007><FONT face=Arial
color=#0000ff size=2>david.</FONT></SPAN></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> <A
href="mailto:sussex-bounces@mailman.lug.org.uk">sussex-bounces@mailman.lug.org.uk</A>
[mailto:sussex-bounces@mailman.lug.org.uk] <B>On Behalf Of </B>Brendan
Whelan<BR><B>Sent:</B> 25 January 2007 09:59<BR><B>To:</B> LUG email list for
the Sussex Counties<BR><B>Subject:</B> [Sussex] Hacked
server<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV><FONT face=Arial size=2>
<DIV><FONT face=Arial size=2>Hi,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Overnight someone has hacked into one of our
servers which is hosted by an ISP. They have modified httpd.conf, clear out
the logs and blocked the creation of files. The server needs to be rebuilt but
I would like to extract the latest data from the databases but I can't create
files.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I have tried to "chmod 770 db" but get the
message "chmod: changing permissions of `db': Operation not permitted" any
suggestions on how I can overcome this problem?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>A bit move info:</FONT></DIV>
<DIV><FONT face=Arial size=2>ls -ld db<BR>drwxrwxr-x 42
db
db 4096 Nov
8 10:28 db</FONT></DIV>
<DIV><FONT face=Arial size=2><BR> </DIV></FONT>
<DIV><FONT face=Arial size=2>Brendan</DIV>
<DIV><BR></DIV></FONT></FONT></DIV><BR>________________________________________________________________________<BR>This
e-mail has been scanned for all viruses by Star. The<BR>service is powered by
MessageLabs. For more information on a proactive<BR>anti-virus service working
around the clock, around the globe,
visit:<BR>http://www.star.net.uk<BR>________________________________________________________________________<BR><BR>This
message is from FDM Group Plc, and may contain information that is
confidential or privileged. If you are not the intended recipient, please
delete the message and any attachments and notify the sender. This email is
not intended to create legally binding commitments on behalf of FDM Group Plc,
nor do its contents reflect the corporate views or policies of FDM. Any
unauthorised disclosure, use or dissemination, either whole or partial, is
prohibited. FDM Group Plc is a private limited company registered in England
(Reg. No.
2542980).<BR><BR><BR>________________________________________________________________________<BR>This
e-mail has been scanned for all viruses by Star Internet. The<BR>service is
powered by MessageLabs. For more information on a proactive<BR>anti-virus
service working around the clock, around the globe,
visit:<BR>http://www.star.net.uk<BR>________________________________________________________________________<BR>
<P>
<HR>
<P></P>__ <BR>Sussex mailing list<BR>Sussex@mailman.lug.org.uk<BR>E-mail
Address: sussex@mailman.lug.org.uk<BR>Sussex LUG Website:
http://www.sussex.lug.org.uk/<BR>https://mailman.lug.org.uk/mailman/listinfo/sussex</BLOCKQUOTE></BODY></HTML>