From: JustinMacCarthy (macarthy at domain iol.ie)
Date: Tue 21 Aug 2001 - 11:06:22 IST
As no-one mentioned this, it would be an idea to run rpm to verify your
installed packages, should pick up some Trojans , you should check rpm
itself too :-)
The coroners toolkit might turn up some things too..
I no linux expert so I sure there are other things you should do too.
Justin
----- Original Message -----
> > Why would a directory called .puta not show up in a ls -a listing ?
(Unless
> > of course the cracker had installed a customised ls)
> >
> rootkits generally install customised versions of lots of things:
> top
> ps
> ls
>
> etc
>
> some of them even have LKM's to go with them, and compilers for machines
> without them.
>
> > > this bugger got in, and I notice the files were modified by a German.
> >
This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:11:45 GMT