Re: Visited by a cracker
From: Eric Paynter (eric_at_arcticbears.com)
Date: 07/12/04
- Previous message: Mike Zupan: "Re: Visited by a cracker"
- In reply to: Per Christian B. Viken: "Visited by a cracker"
- Next in thread: Manuel Arostegui Ramirez: "Re: Visited by a cracker"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 12 Jul 2004 10:56:26 -0700 (PDT) To: focus-linux@securityfocus.com
On Sun, July 11, 2004 7:45 am, Per Christian B. Viken said:
> I've run chkrootkit 0.43 and Rootkit Hunter 1.1.1 and they didn't find
> anything.
Did you check for rootkits with a known safe kernel? i.e. boot from cd
with known good binaries, mount the suspected drive, and check it.
-Eric
-- arctic bears - affordable email and name services @yourdomain.com http://www.arcticbears.com
- Previous message: Mike Zupan: "Re: Visited by a cracker"
- In reply to: Per Christian B. Viken: "Visited by a cracker"
- Next in thread: Manuel Arostegui Ramirez: "Re: Visited by a cracker"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|