[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[no subject]



Just some info: A good hack or rootkit will clean the clean logs.

1. Don't reboot
2. check .bash_history if you are using bash.
3. run lsof <--- this is missed a lot by rootkits
4. copy known good ps, ls, netstat, etc ... commands and use those.
5. check for "..." directories etc..
6. etc... More if you really want to dig deep into this



</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00380" href="msg00380.html">[ale] Cannot chown unowned files</a></strong>
<ul><li><em>From:</em> lists at geographic.net (C. Lee Davis)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00362" href="msg00362.html">[ale] Cannot chown unowned files</a></strong>
<ul><li><em>From:</em> lists at geographic.net (C. Lee Davis)</li></ul></li>
<li><strong><a name="00365" href="msg00365.html">[ale] Cannot chown unowned files</a></strong>
<ul><li><em>From:</em> hbbs at comcast.net (Jeff Hubbs)</li></ul></li>
<li><strong><a name="00367" href="msg00367.html">[ale] Cannot chown unowned files</a></strong>
<ul><li><em>From:</em> rramsdell at adelphia.net (Randy C. Ramsdell)</li></ul></li>
<li><strong><a name="00368" href="msg00368.html">[ale] Cannot chown unowned files</a></strong>
<ul><li><em>From:</em> lists at geographic.net (C. Lee Davis)</li></ul></li>
<li><strong><a name="00369" href="msg00369.html">[ale] Cannot chown unowned files</a></strong>
<ul><li><em>From:</em> volcimaster at gmail.com (Warren Myers)</li></ul></li>
<li><strong><a name="00371" href="msg00371.html">[ale] Cannot chown unowned files</a></strong>
<ul><li><em>From:</em> lists at geographic.net (C. Lee Davis)</li></ul></li>
<li><strong><a name="00372" href="msg00372.html">[ale] Cannot chown unowned files</a></strong>
<ul><li><em>From:</em> rramsdell at adelphia.net (Randy C. Ramsdell)</li></ul></li>
<li><strong><a name="00374" href="msg00374.html">[ale] Cannot chown unowned files</a></strong>
<ul><li><em>From:</em> lists at geographic.net (C. Lee Davis)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00375.html">[ale] Cannot chown unowned files</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00377.html">[ale] Still no flames... :-)</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00374.html">[ale] Cannot chown unowned files</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00380.html">[ale] Cannot chown unowned files</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00376"><strong>Date</strong></a></li>
<li><a href="threads.html#00376"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>