Vesta Control Panel - Forum

even after you clean the trojan, your system is still infected from what i see. systemd (process 1) still creates supicious files under /tmp while all other directories are still clean. but this is speculating now it's on new clean server, now it's inside /tmp: ls -l /tmp total 12 drwx------ 3 root...

But after the update to 0.9.8-20 anyone have been hacked? Or this update is solving the problem? Got hacked on DO, then migrated to another provider, new clean VDS with fresh Vesta install just got 100% CPU load with 5k iops disk and 400 mbit net - so I even can't login via ssh. Rebooted... Now try...