[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] HELP HELP HELP RAQ4r CPU slowly creeps up till server is un-usable



On Sat, 22 Mar 2003, Matt wrote:

> Gerald,
>
> Sorry,, did I say edit-- Woops, I mean we tried to replace it and it kept
> saying that the file was infected.. What does that sound like?
>

   What did he use to replace it? I never heard of 'cp' giving an
   infected warning.
   Do an
   lsattr /bin
   lsattr /sbin
   lsattr /usr/bin
   lsattr /usr/sbin

files that show 'i' attribute have been replaced bt a root kit.

Gerald
--
http://frontstreetnetworks.com | http://store.raqware.com
     ICQ 229276628     |    Phone: +1 203 785-0699
Front Street Networks LLC,  229 Front Street, Ste. #C,
New Haven, CT. 06513-3203 United States of America