I know someone that has a server at rackshack currently and the server was comprimised. Someone was able to hack the server and create some issues with the network. Rackshack said the server had to be restored and/or taken down.

The old hard drive has been put up for 48hours so that this person could retrieve previous data. I tried to login to the account to retrive this old data, but all I can find is the new information and a fresh install.

If they did do a restore, but left the old harddrive up, where do I find this information to get our database stuff. (Really we just need the database information).

Thanks for any input.

is the HD mounted?

check in your WHM to see if its mounted..

Do you have webmin installed? you can check there to see if the hd is installed..

RS wont mount HDs, they install them physically, but wont set them up.

Type df in shell

What do you see? Do you see an extra partition?

If it's not there, you would have to mount the harddisk.

mount [-t fstype] something somewhere

chances are you are using ext3 (for file system type)