Re: I've been hacked by DevilSoul

[Preben Randhol <randhol@pvv.org>]

Angus D Madden <angus@3wsi.com> wrote on 11/01/2002 (11:53) :
> On Fri, Jan 11, 2002 at 05:07:02AM +0100, martin f krafft wrote:
> > you've been hacked -> backup -> re-mkfs -> reinstall -> re-config from
> > backup very carefully (i.e. file by file) -> restore user data -> do
> > some post-mortem with backup -> ensure security -> reopen server to
> > public and users -> more post-mortem -> take more security measures.
> > 
> > standard procedure.
> > 
> 
> agreed.  full disk format and reinstall from backup is the only secure
                                ^^^^^^^^^^^^^^^^^^^^^

This is not safe at all if you mean reinstall programs too. You should
reinstall programs from the net/CD distro and update all programs that
has security fixes. 

You should only install user files and not configuration files without
checking.

-- 
Preben Randhol ------------------- http://www.pvv.org/~randhol/ --
                 «For me, Ada95 puts back the joy in programming.»