[CentOS] I appear to be attacking others

Sun Feb 5 16:25:59 UTC 2006
Steve Bergman <steve at rueb.com>

On Sun, 2006-02-05 at 10:10 -0500, Chris Mauritz wrote:
> Where practical, I also agree with this statement.

It would be a good idea to at least:

# rpm -e --nodeps procps
# find / -name ps -ls
# find / -name top -ls
# yum install procps

This will remove ps and top, verify that no other ps or top executables
exist, and reinstall known good ps and top binaries.

These binaries are often replaced with trojans which act like the
originals, but mask the back doors.

-Steve