Backup Data on Curroupt server

[BruceS]

Hey everyone,

In a bit of a pickle at the moment and I was looking for some suggestions and answers to a few questions.

I have a VPS that was recently hacked and the server was found running some outdated software. FC1, an old apache and php 4. Upon trying to get a backup of the data using the DA supplied backup manager the server was rebooted and is no longer in a state to where I can start it.

The data is accessible on the backend however I can no longer run the supplied script to get a backup running.

As of right now the best thing I can think to do is try to make a clone backup using the files I have access to put that on a second server I have setup and then upgrade from there.

My issue is I'm not sure what files I would need to make this happen.

Any thoughts or suggestions that would make my life a little easier here would be greatly appreciated.

 

[floyd]

the server was rebooted and is no longer in a state to where I can start it.

Start what? The server? DirectAdmin?

I can no longer run the supplied script to get a backup running.

What script are you talking about?

A couple of options:

If the server can be booted and its just DirectAdmin that cannot be started for some reason you can make sure mysql is running and then:

echo "action=backup&local_path=/home/admin/admin_backups&owner=admin&type=admin&value=multiple&when=now&where=local&who=all” >> /usr/local/directadmin/data/task.queue

/usr/local/directadmin/dataskq

You can also boot from a rescue cd and do the above.

You can mount the hard drive as a second drive and chroot to it and then run the above.

So there are 3 ways you can get the backup to run. But if you still cannot get the backup to run then you should try to save the home directories /etc /var /usr/local/directadmin at least. With those directories you can begin to rebuild.