Re: hacked server

2006-03-18 Thread Alvin Oga
On Sat, 18 Mar 2006, Jon Miller wrote: I have a hacked server that has a few rootkits installed. I'm going to rebuild this using the following procedure: 1) backup data files 2) copy /etc/*.conf 3) either make an image of the system and then blow it away or get new drives. Have I

Re: hacked server

2006-03-18 Thread Tony Godshall
for primary. Then you can copy and diff and whatever. If you forgot something, no worries, it's mounted over there at /olddrive/home/ or /olddrive/etc According to Jon Miller, I have a hacked server that has a few rootkits installed. I'm going to rebuild this using the following procedure

hacked server

2006-03-17 Thread Jon Miller
I have a hacked server that has a few rootkits installed. I'm going to rebuild this using the following procedure: 1) backup data files 2) copy /etc/*.conf 3) either make an image of the system and then blow it away or get new drives. Have I missed out on anything? Thanks Jon L. Miller, ASE