[CentOS] I appear to be attacking others

[Steve Bergman]

On Sun, 2006-02-05 at 10:10 -0500, Chris Mauritz wrote:
> Where practical, I also agree with this statement.

It would be a good idea to at least:

# rpm -e --nodeps procps
# find / -name ps -ls
# find / -name top -ls
# yum install procps

This will remove ps and top, verify that no other ps or top executables
exist, and reinstall known good ps and top binaries.

These binaries are often replaced with trojans which act like the
originals, but mask the back doors.

-Steve