> Hi, > There have been worms placed in my server recently. > After clearing my LPD worm yesterday, I saw this today. > Checking `lkm'... You have 5 process hidden for readdir command > You have 5 process hidden for ps command > Warning: Possible LKM Trojan installed > > > I would like to know how do i fix this problem of mine from future > attacks/worms.
Remove it from the network, do an OS Restore, patch it up to date with all the cobalt patches and restore customer data from your backups. Go here for a nice security primer. http://www.average.org/cobalt/ HTH, j -- http://www.bizmanuals.com _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
