RE: [cobalt-users] Server Hacked

["Mark Jaggers" <mjaggers@xxxxxxxxxx>]

I am sorry,  I forgot to mention which server.  This is a Raq4r.  I am
not sure if I can get that file you mentioned since I cant access
telnet.  I will try ftp.  What is cmuExport?


-----Original Message-----
From: Gerald Waugh [mailto:gwaugh@xxxxxxxxxxxxxxxxxxxxxxx] 
Sent: Friday, April 18, 2003 9:46 AM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-users] Server Hacked


On Friday 18 April 2003 10:39, Mark Jaggers wrote:
> I also found some files on our server that look like trojans or 
> viruses.
>
> Papasmurf and Linux_RST
>
> We are now also having problems with email aliases.  I guess the only 
> thing we can do it a full os restore?
>
> Are there any suggestions for doing a back before restore.  I have 
> already downlaoded all our sites via ftp and also did the backup 
> available in the system admin.
>

You might save the /etc/named/records file.
Maybe attempt a cmuExport, I forgot which type server you had.

Gerald
-- 
http://frontstreetnetworks.com         http://raqware.com
Front Street Networks LLC   |  Phone: 203-785-0699
229 Front Street, Ste C, New Haven, CT 06513-3203

_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users