On 17 Dec 02 at 17:42, Reynald I. Ngo wrote: > At 12:59 AM 12/17/2002 -0800, Rick Moen wrote: > > Rick, > > I've almost eradicated eveything... i'm now downloading the > OpenSSL patches. One question, i can't delete replaced binaries... any > idea? I know i need to use chmod... i can't remember. >
use lsattr to find the trojaned files use chattr to delete them and replace them mind you, rm and cp may be compromised...and running them may only make things worse. _ Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph To leave: send "unsubscribe" in the body to [EMAIL PROTECTED] Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph To subscribe to the Linux Newbies' List: send "subscribe" in the body to [EMAIL PROTECTED]
