At 11:59 AM 2/13/00 -0800, you wrote:
If the above steps are out of your area of expertise hire someone who knows what they are doing.
We do this kind of work. We have security experts who actually do it for us under our umbrella. It's extremely expensive. Figure $1,000 AND UP depending on how badly you want to know what might have happened.
Usually you're just better off copying off the site contents, reformatting the hard disk and starting over with the Recovery CD. But... be sure you plug the holes and examine (or have someone who knows what they're doing, examine) every CGI that runs on the system.
If one of your customers wants to run a compiled CGI, learn how to "just say no" <wry grin>.
Buy copies of O'Reilly's "Practical Unix & Internet Security", and O'Reilly's " Building Internet Firewalls". Read them. Learn from them.
Make security a daily issue. Jeff -- Jeff Lasman <jblists@xxxxxxxxxxxxx>