hacked server
I have a hacked server that has a few rootkits installed. I'm going to rebuild this using the following procedure:
1) backup data files
2) copy /etc/*.conf
3) either make an image of the system and then blow it away or get new drives.
Have I missed out on anything?
Thanks
Jon L. Miller, ASE, CNS, CLS, MCNE, CCNA
Director/Sr Systems Consultant
MMT Networks Pty Ltd
http://www.mmtnetworks.com.au
Resellers for: Novell Gold Partner, Cisco Partner, Peopletelecom, Westnet, Sophos Anti-Virus, CA Products
"I don't know the key to success, but the key to failure
is trying to please everybody." -Bill Cosby
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1528" name=GENERATOR></HEAD>
<BODY style="MARGIN-TOP: 2px; FONT: 10pt Arial; MARGIN-LEFT: 2px">
<DIV>I have a hacked server that has a few rootkits installed. I'm going
to rebuild this using the following procedure:</DIV>
<DIV>1) backup data files</DIV>
<DIV>2) copy /etc/*.conf</DIV>
<DIV>3) either make an image of the system and then blow it away or get new
drives.</DIV>
<DIV> </DIV>
<DIV>Have I missed out on anything?</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Thanks</DIV>
<DIV> </DIV>
<DIV>Jon L. Miller, ASE, CNS, CLS, MCNE, CCNA<BR>Director/Sr Systems
Consultant<BR>MMT Networks Pty Ltd<BR><A
href="http://www.mmtnetworks.com.au";>http://www.mmtnetworks.com.au</A><BR>Resellers
for: Novell Gold Partner, Cisco Partner, Peopletelecom, Westnet, Sophos
Anti-Virus, CA Products</DIV>
<DIV> </DIV>
<DIV>"I don't know the key to success, but the key to failure<BR> is trying
to please everybody." -Bill Cosby</DIV>
<DIV> </DIV>
<DIV> </DIV></BODY></HTML>
Reply to: