sandeep shivasharan posted in linux-india-help:
> hi lists,
> 
> below is the chkrootkit output on my linuxbox using redhat 9. can anyone plz.
> tell how to fix the problem.

Much as you are going to dislike this, the ONLY sure way out is a
reinstall from clean media.

> Checking `du'... INFECTED
> Checking `find'... INFECTED
> Checking `ifconfig'... INFECTED
> Checking `killall'... INFECTED
> Checking `ls'... INFECTED
> Checking `netstat'... INFECTED
> Checking `ps'... INFECTED
> Checking `top'... INFECTED
> Searching for RH-Sharpe's default files... Possible RH-Sharpe's rootkit
> installed

Seems quite obvious that your server is rooted. Run rpm -Va and check
for MD5 changes in /usr/bin and /bin.

Beware - there might be sniffers installed feeding your passwords to
dropboxes around the world.

Binand

-- 
Hanlon's Razor: Never attribute to malice that which can be adequately
explained by stupidity.
Bruce's Razor: Never attribute to stupidity that which can be adequately
explained by Microsoft funding.


-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to