Re: [CentOS] I've been hacked -- what should I do next?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



Alfred von Campe wrote:
> >Reinstall, that is my advise.
> 
> That's what I've done in the past too, but I am trying to avoid that  
> option if possible.

I'd opt for reinstallation also, as you normall never can really find
out *what* has been changed, if there is/was an active rootkit on that
machine.

for package in $(rpm -qa); do echo -e "${package}"; rpm -V "${package}"; done

might be of help, also. If rpm didn't get exchanged. If the active
rootkit doesn't intercept that. And so on ...

Ralph

Attachment: pgpioGl5EFrkc.pgp
Description: PGP signature

_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos

[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux