Re: Visited by a cracker

From: Eric Paynter (eric_at_arcticbears.com)
Date: 07/12/04

  • Next message: Manuel Arostegui Ramirez: "Re: Visited by a cracker"
    Date: Mon, 12 Jul 2004 10:56:26 -0700 (PDT)
    To: focus-linux@securityfocus.com
    
    

    On Sun, July 11, 2004 7:45 am, Per Christian B. Viken said:
    > I've run chkrootkit 0.43 and Rootkit Hunter 1.1.1 and they didn't find
    > anything.

    Did you check for rootkits with a known safe kernel? i.e. boot from cd
    with known good binaries, mount the suspected drive, and check it.

    -Eric

    --
    arctic bears - affordable email and name services @yourdomain.com
    http://www.arcticbears.com
    

  • Next message: Manuel Arostegui Ramirez: "Re: Visited by a cracker"