Niccolas, I agree with John. rkhunter is your friend! I set up all my servers to run nightly with weekly updates. Peace, Allan
John R Pierce wrote: > On 02/07/11 10:06 AM, Nicolas Ross wrote: >> I found some suspicious file in /bin and /usr/bin directories that are owned >> by user id 122, where this machine doesn't a userid 122. >> > > oh. get and run rkhunter. preferably do it on read only media via > another system. > > > _______________________________________________ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > > _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
