[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Trinoo DDoS server in init



So which is the real init?

These appear to be the hacked files:
/usr/sbin
-rwxr-xr-x   1 root     root       318004 Feb 13 23:17 init
-rwxr-xr-x   1 root     root        35628 Feb 13 23:17 in.smb

I think you're right.. I have the following in /usr/sbin and I *think* it's still clean... I don't have in.smb in there at all...

-rwxr-xr-x   1 root     root        18436 Sep 24  1999 inetd

In /sbin I have:

-rwxr-xr-x   1 root     root        27176 Apr 24  2000 init

-Craig
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com