Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Apr 2003 15:36:02 +0100
From:      "Jamie Heckford" <jamie@tridentmicrosystems.co.uk>
To:        "'Dave [Hawk-Systems]'" <dave@hawk-systems.com>
Cc:        freebsd-isp@freebsd.org
Subject:   RE: disaster recovery after rootkit -> MySQL and user accounts
Message-ID:  <00b801c30a6e$d465d670$4a64a8c0@jamieheckford>
In-Reply-To: <DBEIKNMKGOBGNDHAAKGNOEPBMOAB.dave@hawk-systems.com>

next in thread | previous in thread | raw e-mail | index | archive | help

> unfortunately because of the corruption of various shared 
> libraries and so forth as a result of the attack, the mysql 
> daemon (in addition to a mitfull of other standard services) 
> will not start.
> 

Surely if you still have most of the data on the drive then you can look
for the RPM database and find out what version was installed on there?
Similar to the /var/db/pkg on FreeBSD for the ports.

Jamie



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?00b801c30a6e$d465d670$4a64a8c0>