Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 Nov 2001 12:07:55 -0500 (EST)
From:      "Andrew R. Reiter" <arr@FreeBSD.org>
To:        Stefan Probst <stefan.probst@opticom.v-nam.net>
Cc:        freebsd-security@FreeBSD.org, Rob Hurle <rob@coombs.anu.edu.au>
Subject:   Re: AdoreWorm
Message-ID:  <Pine.NEB.3.96L.1011114120640.68964A-100000@fledge.watson.org>
In-Reply-To: <5.1.0.14.2.20011114183520.01e71d20@MailServer>

next in thread | previous in thread | raw e-mail | index | archive | help
:   What more happened / needs to be re-installed/deleted/killed...?

Look, while it may have not been done well, the person basically
backdoored your kernel.  For basically everything you do to interact with
your machine, you kinda "trust" your kernel for valid information.  With
that kernel backdoored, you pretty much can't trust anything it says.  

_reinstall_

Andrew

--
Andrew R. Reiter
arr@watson.org
arr@FreeBSD.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.3.96L.1011114120640.68964A-100000>