[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] Help needed
- Subject: Re: [cobalt-security] Help needed
- From: Jay Summers <jay@xxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 01 Jul 2002 09:30:34 -0500
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
> Hi,
> There have been worms placed in my server recently.
> After clearing my LPD worm yesterday, I saw this today.
> Checking `lkm'... You have 5 process hidden for readdir command
> You have 5 process hidden for ps command
> Warning: Possible LKM Trojan installed
>
>
> I would like to know how do i fix this problem of mine from future
> attacks/worms.
Remove it from the network, do an OS Restore, patch it up to date with all
the cobalt patches and restore customer data from your backups. Go here for
a nice security primer.
http://www.average.org/cobalt/
HTH,
j
--
http://www.bizmanuals.com