[cobalt-users] Where can we get clean system files following t0rn hack?

["cowbridge" <cobalt@xxxxxxxxxxxxx>]

Yet another Raq3 hack....

This one was with the t0rn rootkit.

I have looked up the details of t0rn at:
http://www.sans.org/y2k/t0rn.htm

We will migrate the existing sites to a new server and then run the restore
CD.

But for the moment I just want to clean up the server as best I can until
the migration is complete.

I have deleted all the rootkit files and I have restored most of the system
files with clean ones but files I don't have are:
	/sbin/ifconfig
	/usr/sbin/in.fingerd
	/usr/bin/sz
	/usr/bin/top

Can anyone suggest where I can get clean copies of these?

Thanks,

Roger