Subject: Re: Was I hacked?
From: Chuq Von Rospach (chuqui@plaidworks.com)
Date: Thu Aug 17 2000 - 21:11:17 MDT
At 4:30 PM -0600 8/18/00, Dan Burcaw wrote:
>root kits are evil but fairly easy to find if you know what to look for.
>Generally, 'ls' is replaced with a hacked version that hides the
>root kit directories.
>If you suspect you've been root kit'd I suggest reinstalling ls (or
>building it from scratch).
>Also, try using find to search for directories called "..."
If you think ls has been hacked, try du. It'll also show the
directory structure.
-- Chuq Von Rospach - Plaidworks Consulting (mailto:chuqui@plaidworks.com) Apple Mail List Gnome (mailto:chuq@apple.com)And they sit at the bar and put bread in my jar and say 'Man, what are you doing here?'"
This archive was generated by hypermail 2a24 : Thu Aug 17 2000 - 21:15:59 MDT