seekuel wrote:
I remebered that the DNS service was up and running before going home.
On the next day when I checked the services named was off and turned
it on. I thought it was kind of weird.
Yep rootkit alright...one of the system got rootkit the same way...
to check -- don't use ps, netstat or the typical tools -- try using
lsattr and find out if there are some files in /sbin or /bin that have
been prevented from deletion -- if you have -- you've certainly been
rooted...
_________________________________________________
Philippine Linux Users' Group (PLUG) Mailing List
[email protected] (#PLUG @ irc.free.net.ph)
Read the Guidelines: http://linux.org.ph/lists
Searchable Archives: http://archives.free.net.ph
