I've been using DirectAdmin for 15 years and that situation has always existed in Enhanced skin. I just added domain.com and moved on. I never thought of it as a problem. It was just a little weird to come here and see this whole thread about it.
This relies on DirectAdmin running and crond running. If for some reason its not running then this will not work. You will need to figure how to adapt it to your needs. This has all of the backup options.
The "select%30=admin" denotes the username you want to backup in this case "admin"
I noticed it because files in /var/named were encrypted.
I have been using DirectAdmin since 2005 so I know how to update. I wanted to know if anybody knew any more about it than what I have been able to find so far namely updating exim. Is exim really the problem? Yes I know "Keep everything...
It would be a lot more helpful if you gave us the subdomain. If you give us fake information the expect fake answers.
You can create a new user with a subdomain but likely you have to manually create a dns record under the main domain.
I was checking a server today and found a bunch of files with the extension .lilocked. I found out its a result of ransomware called Lilu and it seems to attack older versions of exim. Fortunately for me this was basically an abandoned server so no real damage was done. But it was a wake up call...
I just want to say that I have been using DirectAdmin for many years (15). I don't think I have ever contacted support for anything. Everything is on the forum or help files. I don't know what else you need. Take a look at my registration date and post count.