[plug] cinik slapper worm

[Reynald I. Ngo]

List,

@%!@#$% my mail server got compromised with cinik slapper worm. I'm now currently doing foresics and clean-up... any tips? Currently i noticed it changed my ps, top & netstat... having a time stamp of 1983. Its running its own httpd and it cleaned-up my syslogs... F**k!

---
Cheers,

Reynald I. Ngo

_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph

To subscribe to the Linux Newbies' List: send "subscribe" in the body to [EMAIL PROTECTED]