[Gllug] rooting?

[Richard Cohen]

On Thu, 14 Feb 2002, Allen Wayne wrote:

> Hi All,
>
> can anyone point me in the best drection to check if a machine has been
> rooted ... possibly by the tuxkit? I have been asked to look at a PC running
> RH6.???? with quite a few holes over (open ports etc etc...) root recentely
> recieved a message about underliverable mail refering to the tuxkit
> install... and a couple of logs appear to be  either missing or unusual
> ....ver long ftp logins missing ftp transfers
>
>
> any pointers please????

http://www.chkrootkit.org/ might be worth looking at...

> Wayne

Cheers
Richard


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug