Hello Udo,

On Fri, 11 Jun 2010 16:45:00 +0200 Udo Rader 
<udo.ra...@bestsolution.at> wrote:
>one or our servers had previosly been compromized by a rootkit that
>rkhunter did not detect (..) It says "Enjoy FloodBot based on 
OverKill" (..)

Please see my post-mortem here: 
http://ubuntuforums.org/showthread.php?t=1403787. 


>Now that we removed it, I have a couple of files laying around 
here and
>am willing to contribute if someone is interested in dissecting.

If contents and behaviour differ from what's posted in the 3-page 
thread above please let me know, preferably by opening a ticket in 
RKH's bug tracker at Sourceforge: 
http://sourceforge.net/tracker/?atid=794187&group_id=155034&func=bro
wse, TIA. 


Best regards,
unSpawn
--


------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to