On Fri, Nov 12, 1999 at 02:31:35PM -0900, Christopher S. Swingley wrote: > The only way to be sure you've removed all backdoors and compromised > files is is to disconnect from the net, format all of your drives > and reinstall from scratch. >[...] > Probably sounds like overkill, but when all is said and done, I think > you'll feel better -- and it might even take less time than trying to > find all the things that have been affected.
You're right, of course. After all, debsums and dpkg could be Trojaned, /var/lib/dpkg/info/*.md5sums could have been regenerated, etc., etc., in which case most of my previous suggestions would be worthless. All unlikely, but still certainly possible. That said, I'm not sure if I'd ever have the heart to reinstall from scratch on my own precious machine. :(
