Alfred von Campe wrote:
Reinstall, that is my advise.
That's what I've done in the past too, but I am trying to avoid that option if possible.
I'd opt for reinstallation also, as you normall never can really find out *what* has been changed, if there is/was an active rootkit on that machine.
for package in $(rpm -qa); do echo -e "${package}"; rpm -V "${package}"; done
might be of help, also. If rpm didn't get exchanged. If the active rootkit doesn't intercept that. And so on ...
Ralph