Re: hacked server

2006-03-18 Thread Tony Godshall
>>> > > If it was me, I'd move the drive to secondary and get a new > drive for primary. Then you can copy and diff and whatever. > If you forgot something, no worries, it's mounted over > there at /olddrive/home/ or /olddrive/etc > > According to Jon Mi

Re: hacked server

2006-03-18 Thread Alvin Oga
On Sat, 18 Mar 2006, Jon Miller wrote: > I have a hacked server that has a few rootkits installed. I'm going to > rebuild this using the following procedure: > 1) backup data files > 2) copy /etc/*.conf > 3) either make an image of the system and then blow it aw

hacked server

2006-03-17 Thread Jon Miller
I have a hacked server that has a few rootkits installed. I'm going to rebuild this using the following procedure: 1) backup data files 2) copy /etc/*.conf 3) either make an image of the system and then blow it away or get new drives. Have I missed out on anything? Thanks Jon L. Miller,