disaster recovery after rootkit -> MySQL and user accounts

Dave [Hawk-Systems] dave at hawk-systems.com
Thu Apr 24 07:30:31 PDT 2003


>If the old MySQL server is still running, who cares what version it is?
>Just do a dump and import.  Sure, it'll take a bit longer, but it's
>version independent and your data is in a safe format for the
>transition.

unfortunately because of the corruption of various shared libraries and so forth
as a result of the attack, the mysql daemon (in addition to a mitfull of other
standard services) will not start.

Dave




More information about the freebsd-isp mailing list