Results 1 to 7 of 7
  1. #1
    Join Date
    Nov 2010
    Posts
    230

    Recover one deleted file? (Server was hacked)

    Earlier today, my server was hacked.

    A VERY important file was deleted, nothing else was touched.


    Is there any way to get this file back?

    I tried the lsof method, no luck (it didn't show up there )

    Right now, ext3grep is running...maybe it'll get it back...I'm praying to God it will

    I ran ext3undelete with no luck.


    Any advice/things to try?

  2. #2
    Join Date
    Jul 2007
    Location
    Ashburn, VA
    Posts
    1,314
    Did you have any backups at all?
    Preetam Jinka

    Isomerous - High performance web services for business and individuals.
    Bitcable Colocation, KVMs, cPanel hosting, Oracle expertise, and more.

  3. #3
    There is a program called testdisk available in the repos of most distros that you can run and might be able to recover the file.

    If it's not in your repos, you can download it manually but I can't post the link. Just Google "testdisk"

  4. #4
    Join Date
    Nov 2010
    Posts
    230
    Update: I was unable to get it back.


    I'll try testdisk now.

  5. #5
    Join Date
    Jan 2011
    Posts
    451
    Hello,

    There are various methods to recover deleted files. But none had worked for me ever. Anyways Good Luck.
    " Your work is to discover your work and then with all your heart to give yourself to it. "

    That's the mark of a true professional !

  6. #6
    Join Date
    Apr 2011
    Posts
    74
    I don't want to be off topic, I know you're asking for a way to recover your file and I wish you the best luck with it, but I think is really strange that someone hacked your server and just touched one file! I mean, you should examine it further for future protection. It sounds like a hitman guy and not a "generic" hacker.

  7. #7
    Join Date
    Nov 2010
    Posts
    230
    Quote Originally Posted by MBGear View Post
    I don't want to be off topic, I know you're asking for a way to recover your file and I wish you the best luck with it, but I think is really strange that someone hacked your server and just touched one file! I mean, you should examine it further for future protection. It sounds like a hitman guy and not a "generic" hacker.
    I know who did it now, and how. It wasn't even really 'hacked'.

    His name is Liam Norris.

    I used his Minecraft server control panel (MCDash) and neglected to change my root password after having stopped using it.

    He was a moderator on my game server, and the other night he was demoted for inactivity (the night before last night...the 'hack' was done the day after he was demoted.) and went childish about it..he's 18.

    Anyway...I searched the game server log for the IP it said had last logged in, and all results came up to his username.


    I'm even thinking of taking legal actions against him for how he used his customer's data.

Similar Threads

  1. Recover File Deleted - I payd for solution (PAYPAL)
    By CleberDantas in forum Hosting Security and Technology
    Replies: 4
    Last Post: 11-23-2007, 03:19 AM
  2. recover deleted partition on my external hd.
    By rysolag in forum Computers and Peripherals
    Replies: 3
    Last Post: 06-21-2006, 02:56 AM
  3. CRAP! How to recover deleted files!!!
    By Hector404 in forum Dedicated Server
    Replies: 11
    Last Post: 12-27-2005, 02:53 PM
  4. Urgent! Is there a way to recover deleted database?
    By JohnLee in forum Hosting Security and Technology
    Replies: 4
    Last Post: 03-31-2004, 11:26 PM
  5. Recover Deleted Site
    By madmax in forum Dedicated Server
    Replies: 12
    Last Post: 10-16-2002, 08:34 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •