Re: Linux machine hit by ransomware
On 7/6/25 19:47, Rick Macdonald wrote:
After running Debian for nearly 30 years (and other distros prior to
that), my Linux server has been hit by a ransomware attack about 11
days ago.
On 7/7/25 17:18, David Christensen wrote:
Please boot live media in the server, open a root terminal, mount the
server file systems under /mnt/server/, run the following commands (I
have assumed your username is "rick"; please substitute the correct
name), and copy/paste the console session into your reply. Document any
changes that you have made since the attack:
To investigate the Samba theory:
# testparm
David
Reply to: