Hello Udo, On Fri, 11 Jun 2010 16:45:00 +0200 Udo Rader <udo.ra...@bestsolution.at> wrote: >one or our servers had previosly been compromized by a rootkit that >rkhunter did not detect (..) It says "Enjoy FloodBot based on OverKill" (..)
Please see my post-mortem here: http://ubuntuforums.org/showthread.php?t=1403787. >Now that we removed it, I have a couple of files laying around here and >am willing to contribute if someone is interested in dissecting. If contents and behaviour differ from what's posted in the 3-page thread above please let me know, preferably by opening a ticket in RKH's bug tracker at Sourceforge: http://sourceforge.net/tracker/?atid=794187&group_id=155034&func=bro wse, TIA. Best regards, unSpawn -- ------------------------------------------------------------------------------ ThinkGeek and WIRED's GeekDad team up for the Ultimate GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users