Security Incidents mailing list archives

Re: Machine compromised, rootkit and DDoS tools installed.


From: H Carvey <keydet89 () YAHOO COM>
Date: Fri, 22 Sep 2000 21:31:28 -0000

After 
poking around
on the system, I discovered a rootkit had been 
installed as
well as the TFN DDoS tools.

I'd be most interested in what you did via "poking 
around" that led to the discovery of the rootkit. 
I'd appreciate it if you cared to share your 
methodology...via posting or email.

Thanks
Carv


Current thread: