[CentOS] data recovery

[Keith Roberts]

On Fri, 23 Sep 2011, Paras pradhan wrote:
*snip*

> No. This is a production server and nobody logs in. Very 
> very restricted.

Have you checked all your logs? What ports are open?
What CLI tools to format a HDD do you have on the server?

>
>>
>> Also, is it possible for a trojan program to do this to your
>> HDD?
>
> Are there any know trojan that can change the disk layout?

I don't know of any. What applications do you have running 
on that server?

You say a production server. What type of server - a web 
hosting provider?

What scripting languages do you have running on the server, 
if any?

If you give me an email directly, I might be able to do a 
remote login for you, and some forensics, as that is one of 
my many interests.

Kind Regards,

Keith Roberts

-----------------------------------------------------------------
Websites:
http://www.karsites.net
http://www.php-debuggers.net
http://www.raised-from-the-dead.org.uk

All email addresses are challenge-response protected with
TMDA [http://tmda.net]
-----------------------------------------------------------------