[OZAPRS] VK5 igate and VKMAIL

[Dave Horsfall]

On Fri, 21 May 2004, Geoff wrote:

> Run chkrootkit on your system - this happened to me a couple of times as
the
> result of the box being comprimised.....

Yep.  Also look for missing /var/log/messages, shell history files, etc.

And you cannot repeat *cannot* reply upon binaries such as "strings",
"ps", etc.  Even "ls" can be trojaned to not see certain files.

Look for suspicious filenames such as "...", ".. ", etc.

-- Dave
_______________________________________________
ozaprs mailing list
ozaprs at marconi.ics.mq.edu.au
http://marconi.ics.mq.edu.au/cgi-bin/mailman/listinfo/ozaprs