[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-users] chkrootkit
- Subject: RE: [cobalt-users] chkrootkit
- From: "Ryan Howe" <ryan@xxxxxxxxxx>
- Date: Mon Feb 24 17:52:01 2003
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of William J.A.
Brillinger
Sent: Monday, February 24, 2003 8:35 PM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: RE: [cobalt-users] chkrootkit
At 07:36 PM 24/02/03 -0500, you wrote:
>Should we dump this box and os restore it?
>Thanks Ryan
Do you get the same results if you rerun the test several times?
- Bill
Yes I did. But then I did delete some of the files in /tmp and that cleared
the LKM messages about hidden processes. I thought slapper only infected MS
database products? Any suggestions?
Ryan