try the ff. links http://vil.nai.com/vil/content/v_99711.htm
hth. 'jopoy Reynald I. Ngo said: > List, > > @%!@#$% my mail server got compromised with cinik slapper worm. > > I'm now currently doing foresics and clean-up... any tips? Currently i > noticed it changed my ps, top & netstat... having a time stamp of 1983. > Its running its own httpd and it cleaned-up my syslogs... F**k! > > --- > Cheers, > > Reynald I. Ngo > > _ > Philippine Linux Users Group. Web site and archives at > http://plug.linux.org.ph To leave: send "unsubscribe" in the body to > [EMAIL PROTECTED] > > Fully Searchable Archives With Friendly Web Interface at > http://marc.free.net.ph > > To subscribe to the Linux Newbies' List: send "subscribe" in the body to > [EMAIL PROTECTED] _ Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph To leave: send "unsubscribe" in the body to [EMAIL PROTECTED] Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph To subscribe to the Linux Newbies' List: send "subscribe" in the body to [EMAIL PROTECTED]
