[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] POP 3 stopped suddenly
- Subject: Re: [cobalt-users] POP 3 stopped suddenly
- From: flash22@xxxxxxx
- Date: Mon Feb 19 04:36:20 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
On Mon, 19 Feb 2001, Gilles Dumangin wrote:
> [root@raq3 /]# locate nscan
> /usr/bin/duarawkz/dua.synscan
Short followup, this was in fact a rootkit, worse, it was boobytrapped,
removing it killed all the network services.
Be carefull if you find one like this :(
If you have a very reasonable looking inetd.conf with no holes but that
isn't original, be *extra* carefull ...
gsh