Re: hi, need help

["Adam Pal" <pal_adam () gmx net>]

Hi Mahajan

1) take all evidence you can access yourself
2) contact the provider
3) ask the provider for saving logfiles related to the incident
4) ask the provider for a backup (if you dont have a backup yourself) of your original page
5) ask the provider to escalate the issue to its security dept. 
6) take legal steps having logs as piece of evidence


additional you can inspect the logfiles to determine how the security breach occured and get way to fix it, otherwise 
you will face the same issue again and again.
> From this point of view, the information you give is pretty poor because:
- you dont tell how it is hosted
- you dont tell where it is hosted
- you dont mention what type of service, version etc...
- you dont mention the URL
- you dont mention the timeline
- ...


good luck!
Adam Pal

-------- Original-Nachricht --------
> Datum: Thu, 13 Nov 2008 14:20:48 +0530
> Von: "Dhiraj Mahajan" <dhirajsmahajan () gmail com>
> An: security-basics () securityfocus com
> Betreff: hi, need help

> some hacker has hacked my website. (displaying hacked by turkish
> hacker), now wht shld i do to retrieve my
> original website. so please guide me how to get rid of tht
>
> -- 
>
>
> Thanks & Regards,
>
>
> Dhiraj S Mahajan,

-- 
Sensationsangebot nur bis 30.11: GMX FreeDSL - Telefonanschluss + DSL 
für nur 16,37 Euro/mtl.!* http://dsl.gmx.de/?ac=OM.AD.PD003K11308T4569a