Re: Visited by a cracker

From: Eric Paynter (eric_at_arcticbears.com)
Date: 07/12/04

  • Next message: Manuel Arostegui Ramirez: "Re: Visited by a cracker" 
    Date: Mon, 12 Jul 2004 10:56:26 -0700 (PDT)
To: focus-linux@securityfocus.com

    On Sun, July 11, 2004 7:45 am, Per Christian B. Viken said:
    > I've run chkrootkit 0.43 and Rootkit Hunter 1.1.1 and they didn't find
    > anything.

    Did you check for rootkits with a known safe kernel? i.e. boot from cd
    with known good binaries, mount the suspected drive, and check it.

    -Eric 

    --
arctic bears - affordable email and name services @yourdomain.com
http://www.arcticbears.com
  • Next message: Manuel Arostegui Ramirez: "Re: Visited by a cracker"

    Relevant Pages

    • Re: Problem with startup
      ... Christian Gammelgaard wrote: ... > Regards Christian ... Is this a new install and you have never been able to boot? ... If this is a new install and you are having problems, ...
      (alt.os.linux.redhat)
    • Re: fsck on Caldera 2.3 Linux
      ... > Christian wrote: ... >> Is there something else I need to do to make it unbusy? ... boot from a knoppix live cd and fdisk away those ...
      (comp.os.linux.misc)
    • Re: Non-Apple SCSI CD Burner question
      ... christian060401@xxxxxxxxxxxx writes: ... if you exchange it with your ... you might no longer be able to boot your Mac ...
      (comp.sys.mac.hardware.storage)
    • Re: Laufwerkbuchstaben ändern nach Neuinstallation...
      ... weil ich mit diesem Vokabular nicht ganz so vertraut bin....!!! ... "Christian Praus" wrote: ... >>und nicht auf BOOT C. ...
      (microsoft.public.de.german.windowsxp.setup)