Stop Server Attack from Outside: Semi dedicated windows server, AND
Completely Re configure setting. $[url removed, login to view]
Our Server spec details
[url removed, login to view]
WE have a windows server hosted with eukhost , as semi dedicated VPS server.
I need some one who is expert at dealing with hacking / attack issues in windows environment servers.
WE have had some one attacking the server to the point they have managed almost to take control of the admin settings; I’m not sure if they have managed to change the log in details them also. ( EUK host is investigating at moment as at present I cant log in). This is resulting in our e commerce site being up and down.. Whilst we can get patches done, they seem to be temporary. Our site janeojewelscom
My current programmer has noticed that a exec file is running on our ISS log: file which is: something like this: exec xp_cmdshell
We have the ip address of the party responsible for this also.
Which they have used to access server..
This is the only detailed information I can give you.
I need a ISS Windows Server Expert to look into this attacks, rectify and recognise to a level where its permanently secure form attacks … as its hosted on a external platform which it self is secure, this should not be a problem as long as our configuration is correct and secure.
I need to review the conjuration and make it completely secure from attacks and also to modify the configuration so that they are more efficient.
Setting up alerts, proper backs up regularly etc.
What I propose is to re configure the server setting completely, after initially making its secure and resolving current problem.
So, to clarify: I need to resolve current issue, and then completely re configure the server , in a way that we are not down with our current site.
My previous administrator has obviously not done the configuration correctly, and hence I’m seeking from a qualified expert with history and a positive feed back of similar work carried with total professionalism with support after.
I would like to use this person, also on regular basis.
I would obviously need to give you access to complete hosting and log in details , FTP., remote access. And as such its vital I ask you to agree to sign a NDA with evidence of your identity in form of ID card, etc.
The most vital pre requisite is some one who is dedicated and does not give up, experienced at any kind of server issues and attacks and above all configuring to a level which is secure proof from any attacks. Amiable for support on work carried out. Amicable and ethical!