bertolai

Our support staff has responded to your request, details of which are described below:
Discussion Notes
Your order on 05/30/11 was for a Domain Backorder, and not for the registration of a domain name.
Domain Alert® Pro Backordering helps you attempt to acquire a domain name when it becomes available for registration. It includes a Domain Alert Pro Monitoring membership, a Go Daddy Auctions® membership, $10 toward your first auction bid, and one year of domain name registration.
Placing a backorder does not guarantee that you will acquire the domain name. The current registrant might renew the domain name, or we might be unsuccessful in our attempt to register it for you.
Many variables affect the Domain Alert Pro Backordering process. For instance, you might have to participate in an auction to win your backordered domain name, and the auction might be public or private. This process is in place to provide each of our customers an equal opportunity to acquire domain names.
You backorder a domain name — You can purchase a backorder for a domain name before it expires. There is no limit on the number of Go Daddy customers who can backorder a domain name. For instructions on placing a backorder, see Setting up Domain Alert Pro Backordering.
You monitor the domain name — With your free Domain Alert Pro Monitoring membership, you can monitor your backordered domain name and receive email notifications within 24 hours of any changes in registrar, status, expiration date, or nameservers.
The domain name expires and goes to auction — When the domain name expires, it enters a 10-day public auction at Go Daddy Auctions. You must actively participate in the auction until it ends.
Here’s how the auction works:
If you placed the first backorder, we place an opening bid of $10 for you, and we send you an email about the auction.
If someone outbids you, we send an additional email. You can place a higher bid, apply the backorder credit to another domain name, or request a refund from our support department.
NOTE: We include only the first $10 bid in the price of the backorder. You are financially responsible for additional bids.
If you didn’t place the first backorder, we email you regarding the auction, and you can begin placing bids.
NOTE: Your backorder purchase includes $10 toward your first bid. You are financially responsible for additional bids.
The auction ends — Even if you win the auction, the current registrant can still renew the domain name during the next few weeks.
Here's how it works:
If you win, but the current registrant renews the domain name, we notify you via email.
If you win and the registrant does not renew the domain name, we process a change of registrant and move the domain name into your account within 45 days. Your If you win and the registrant does not renew the domain name, we process a change of registrant and move the domain name into your account within 45 days. Your domain name is registered with us for one year from the time it enters your account.
If you don’t win or if the current registrant renews the domain name, you can request a refund from our support department or apply your backorder credit to another domain name. There is no time limit for backorder reassignment, and the product does not expire. See Changing a Backorder to a Different Domain Name.
You backorder a domain name — You can purchase a backorder for a domain names before it expires. There is no limit on the number of Go Daddy customers who can backorder a domain name. For instructions on placing a backorder, see Setting up Domain Alert Pro Backordering.
We monitor the domain name daily — Our system checks the domain name’s status daily until the registry releases it. Every registry provides a daily list of domain names they are releasing and the time of release. You can view changes to a domain name’s registrar, status, expiration date, or nameservers in your Domain Alert Pro Monitoring account.
We attempt to capture the domain name — We attempt to register the domain name before it is available, and we continue to make attempts until we or another registrar captures it.
If we capture the domain name
If you are the only customer with a backorder on the domain name, then we award the domain name to you without an auction.
If there are multiple backorder holders, then we invite everyone to a private auction where only backorder holders can participate.
If you are the first backorder holder, we place an opening bid of $10 for you, and we send you an email about the auction. If someone outbids you, we send an additional email. You can place higher bids, apply the backorder credit to another domain name, or request a refund from our support department.
NOTE: We include only the first bid in the price of the backorder. You are financially responsible for additional bids.
If you didn’t place the first backorder, we email you regarding the auction, and you can begin placing bids.
NOTE: Your backorder purchase includes $10 toward your first bid. You are financially responsible for additional bids.
If we don't capture the domain name
We email you that the backorder was unsuccessful. You can request a refund from our support department or apply your backorder credit to another domain name. There is no time limit for backorder reassignment, and the product does not expire. See Changing a Backorder to a Different Domain Name.
If the domain name went to auction, the auction ends — What happens next depends on the outcome of the auction.
If you win, we process a change of registrant and move the domain name into your account within 45 days. Your domain name is registered with us for one year from the time it enters your account.
If you don’t win, you can request a refund from our support department or apply your backorder credit to another domain name. There is no time limit for backorder reassignment, and the product does not expire. See Changing a Backorder to a Different Domain Name.
Please let us know if we can assist you in any other way.
Sincerely,
Kanila P.

22Striker22:
Мелкософт напрямую платит 2 у.е. за уса инстал, это пока максимальная ставка, что мне встечалась.

вэб шел это как правило один скрипт(php,perl) который предназначен для управления сайтом. Может иметь множество функций: скачивание\заливка\удаление файлов, дамп MySQL, просмотр логов и конфигов сервера + выполнение команд на сервере.

-Смотрите дату редактирования файла и ищите в логах доступа записи за это время (+- несколько минут). Если повезет (дата редактирования файла настоящая), то один экземпляр скрипта вычислите. Далее ищете в логах другие записи по IP, с которых работали с этим скриптом, наверняка на сервере будет ещё несколько копий скрипта. Удаляете все скрипты и внимательно следите за логами.

-найдите все директории на сервере с правами 777 и выставьте нормальные права

-Лечить нужно так:
Каждый сайт работает под своим UID а права на файлы 600 и на директории 700.

-можно и safe_mode врубить большинство cms с ним прекрасно живут.

-лечиться можно только правельным подходом к политике безопасности на сервере:
* разделение прав пользователей на группы
* монтирование временных файловых систем с флагами на запрет выолнения
* fastcgi а не mod_тра_ля_ля
* если речь про php тогда open_base_dir и запрет опасных функций
* регулярные обновления софта
* настройка фаеровола так как не только вебшелы заливают
а для профилактики привели два отличных примера - поиск всех 777 файлов и парсинг всех php/pl/cgi скриптов

-Чтобы найти "все" шелы на сервере:
Код:

find /home \( -regex '.*\.php$' -o -regex '.*\.cgi$'  \) -print0 | xargs -0 egrep -il "r0nin|m0rtix|r57shell|c99shell|phpshell|void\.ru|phpremoteview|directmail|bash_history|brute *force"

в одну строку.

Можете даже крон задачу сделать и посылать себе на мыло результаты. Хотя особо часто запускать тоже плохо, все таки большая нагрузка на диск. систему.

alvex77:
соотношение количества переходов по аутам выставляется параметром "Weight =", там в факе только посмотри как правильно это сделать.