> it was bind + tOrn ROOTkit exploit, before april 1 i was using bind
>8.2.2-P5 and the fookin WORM got me.
>I did ugrade BIND and reinstalled some packages like inetd,
>net-tools...etc. to totally erased all trojan files.
You only reinstalled some package?!!!
I am a little bit paranoid about these things, you should reinstall everything from scratch.
Jeffrey
