I just got notice from EV1 that I possibly have LKM trojan and Showtee Rootkit and I must order a restore, which I just did. I requested the old HD be attached as slave for 48 hours.

My questions are:

1. I had Ensim 3.0 before. Now would be a perfect time to get restored to Ensim 3.1, is that right?

2. I only have about 15 sites hosted and I have backup to the web sites. I can simply re-create all the accounts in Ensim and re-upload. Is this correct?

3. I also had local (on my own Hard Drive) copy of /var/spool/mail for some sites. Can I somehow append those un-downloaded email messages back to the new sites, so that my clients won't loose any email?

Thanks for your help!

Sam

1. I don't think EV1 even has images with Ensim 3.1. I'm sure they will restore your server to Ensim 3.5. However, you might want to make sure they do that.

2. Yes. Actually you can just copy files from your old hd mounted as slave onto the new hd. That would be a good solution if you're on a slow connection yourself.

3. I'm not sure whether it's possible. Somebody else might know the answer.

Thanks levovich!

I didn't even realize there's Ensim 3.5. Thought 3.1 is current. Just checked ticket, they're restoring now so it'd be too late to request anything. EV1 deserves a praise for starting my standard restore so quickly. I'm impressed so far.

Does anyone know of a thread here covering the linux commands for copying from slave drive? I did a search and found many messages mentioning the process, but not the actual commands.

Re: question 3 in my original post: I'd like amend my question:
If I can't "append" the messages in my preserved /var/spool/mail/* files... Is it feasible to simply copy back those files to each site, once I create all the user accounts for sites? Should I backup the default newly created mail message files (presumably empty)?

Thanks!

Samroc,

Any luck? I am going through the same problem...

Any help would be appreciated... Did you manage to get the emails restored?