.cinik worm : remedy?

From: Jim Beam (JimBeam@nonet.com)
Date: 10/10/02


From: "Jim Beam" <JimBeam@nonet.com>
Date: Thu, 10 Oct 2002 09:34:41 GMT

First I stopped the Apache httpd daemon. Then I deleted all the .cinik*
files throughout my system.
Checked to see if an httpd was running and didn't find one. Then I restarted
the machine.

I still see a lot of UDP traffic to my machine on port 1812. (a symptom onf
.cinik worm).

Is there any way I can get rid of the work and any back-door entries without
having to reinstall the OS?

Thanks much.


Quantcast