Re: Visited by a cracker
From: Eric Paynter (eric_at_arcticbears.com)
Date: Mon, 12 Jul 2004 10:56:26 -0700 (PDT) To: firstname.lastname@example.org
On Sun, July 11, 2004 7:45 am, Per Christian B. Viken said:
> I've run chkrootkit 0.43 and Rootkit Hunter 1.1.1 and they didn't find
Did you check for rootkits with a known safe kernel? i.e. boot from cd
with known good binaries, mount the suspected drive, and check it.
-- arctic bears - affordable email and name services @yourdomain.com http://www.arcticbears.com