Re: I've been hacked by DevilSoul

[Christoph Wegener <cwe@bph.ruhr-uni-bochum.de>]

"Jacques Lav!gnotte" wrote:

> On Thu, Jan 10, 2002 at 08:31:00PM -0800, Alvin Oga wrote:
>
> A RootKit was installed, only the sniffer was used...
>
> Any idea of what the «default files and dirs» are ?

Please see
http://www.sans.org/y2k/t0rn.htm

Greetz
Christoph
--
    .-.                             Ruhr-Universitaet Bochum
    /v\    L   I   N   U   X        Lehrstuhl fuer Biophysik
   // \\  >Penguin Computing<       c/o Christoph Wegener
  /(   )\                           Gebaeude ND 04/Nord
   ^^-^^                            D-44780 Bochum, GERMANY

Tel: +49 (234) 32-25754             Fax: +49 (234) 32-14626
mailto:cwe@bph.ruhr-uni-bochum.de http://www.bph.ruhr-uni-bochum.de