5 Feb
2006
5 Feb
'06
5:25 p.m.
On Sun, 2006-02-05 at 10:10 -0500, Chris Mauritz wrote:
Where practical, I also agree with this statement.
It would be a good idea to at least:
# rpm -e --nodeps procps # find / -name ps -ls # find / -name top -ls # yum install procps
This will remove ps and top, verify that no other ps or top executables exist, and reinstall known good ps and top binaries.
These binaries are often replaced with trojans which act like the originals, but mask the back doors.
-Steve