Re: hacked?

[Matt Drew <mdrew redhat com>]

The redhat site:

http://www.redhat.com/support/alerts/Adore_worm.html

which is basically the same thing, with links to the rpms you need and to
the sans.org site with the cleaning instructions.

Matt


On Tue, 10 Apr 2001, Bob McClure Jr wrote:

> Go to
>
> http://www.sans.org/y2k/adore.htm
>
> for information on finding the adore worm and eliminating it from your
> system.
>
> On Tue, Apr 10, 2001 at 04:49:20PM -0400, Luis Cova wrote:
> >
> > > I haven't read up on the adore worm. I read about the ramen and tested
> > > for it. I read about the lion and tested for it (and even caught it
> > > working on breaking in at 3AM). But, haven't followed this one at all.
> > > I'd check it out!
> > >
> > > ---
> >
> > What did you do about the lion worm....  how did you test it,,, and even
> > caught it....
> >
> > I think my server is infected.. what can i do??????
> >
> > WHat are the signals for detecting the lion worm
> >
> > Luis Cova
>
> Cheers,
>

-- 
Matt Drew
Peer Review team lead and Bughunter
Red Hat Consumer Services