On Tue, 2003-04-29 at 13:32, Mike wrote: > Hi > I have a horrible feeling that my system may have been compromised > > I have a file libwrap.a (part of tcp_wrappers) > > like this > > ?r-x-wxrwt 26977 25716 159071 1969188457 May 4 2031 > /usr/lib/libwrap.a run lsattr on that file. but the date stamp seems a bit, umm, odd. You might have broken into - you might also be having some sort of horrible corruption. > This file cant be deleted. > > I have replaced all other files directly. > > So the question is - is it possible to repair this without a full > re-install? I'd not advise trying to clean it up. You might get it clean, but you'll never know. -sv
