> cli.c is the client side to suckit rootkit--which I had removed today.. > would you mind sharing with me what you did to replace crond with a refresh-untouched > version?? > dave
I would suggest you first remove the bad file and then you should check and make sure they are really gone... and then just rpm -Uvh --force ftp://www.zeffie.net/cobalt/RaQ550/RPMS/vixie-cron-3.0.1-38C1.i386.rpm Zeffie... "Get your Z's with Zeffie" 734-454-9117 Cobalt RaQ System Administration, Development, Maintenance and Repairs. Advanced Cobalt Security, Firewall, Snort, AntiSpam, AntiVirus, etc. GUI's http://www.zeffie.com/ Home of the Worlds Largest Collection of RaQ rpms _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
