[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[ale] New Linux Rootkit
- Subject: [ale] New Linux Rootkit
- From: jslozier at gmail.com (Jay Lozier)
- Date: Tue, 20 Nov 2012 17:17:17 -0500
- In-reply-to: <[email protected]>
- References: <[email protected]>
On 11/20/2012 04:53 PM, Scott Plante wrote:
> Well, for one thing, it adds a line to /etc/rc.local. So you could
> take a look at that and see if there's anything out of place.
> Scott
> ------------------------------------------------------------------------
> Jay Lozier asked:
>
> Quick question - how does determine if the rootkit is running?
>
Looking at /etc/rc.local the only executable line is exit 0 and the
comments state the by default it does nothing.
--
Jay Lozier
jslozier at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20121120/0a147e86/attachment.html>