Date: Wed, 14 Nov 2001 18:19:13 +0300 (EAT) From: <ksemat@wawa.eahd.or.ug> To: John Baldwin <jhb@FreeBSD.ORG> Cc: Stefan Probst <stefan.probst@opticom.v-nam.net>, Rob Hurle <rob@coombs.anu.edu.au>, <freebsd-security@FreeBSD.ORG> Subject: RE: Adore worm Message-ID: <Pine.LNX.4.33.0111141818030.27978-100000@sanyu1.sanyutel.com> In-Reply-To: <XFMail.011113092233.jhb@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
I also add my voice to the hullabaloo. Reinstall the machine, use ssh and do a cvsup to the latest stable release of freebsd. Do this regularly in order to keep on top of things. Noah. On Tue, 13 Nov 2001, John Baldwin wrote: > > On 13-Nov-01 Stefan Probst wrote: > > Good Evening, > > > > sorry for newbie-posting, but I don't have too much time to sift through > > archives.... > > > > Looks like my FreeBSD 4.2 Box (FreeBSD 4.2-RELEASE (GENERIC)) got hit by a > > worm - or infested by purpose: > > It's a rootkit, and your box has been compromised. Backup your data and > reinstall unless someone else has a better idea. > > -- > > John Baldwin <jhb@FreeBSD.org> -- http://www.FreeBSD.org/~jhb/ > "Power Users Use the Power to Serve!" - http://www.FreeBSD.org/ > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.33.0111141818030.27978-100000>