[CentOS] Need some help (been hacked)...

Sat Apr 9 17:36:25 UTC 2005
Chris Mauritz <chrism at imntv.com>

Johnny Hughes wrote:

[snip]

>If you have been hacked, you should probably not clean up the computer,
>but should backup data and re-install from scratch.  If someone has
>hacked you, they can have installed binary files that look like the
>original but contain Trojan listeners for remote login that are hidden
>from the installed programs. 
>  
>

That is absolutely the way to handle a hacked machine.  Unless you've 
got MD5 fingerprints of each file on the system (a la tripwire), there 
is no way of knowing where the naughty people may have stashed future 
surpises for the original poster.

Cheers,

C