Hacked?

[Fernando Gleiser]

On Fri, 9 May 2003, Bjoern A. Zeeb wrote:

>
> this asumes that truss is ok ;-) perhaps take the truss from your
> other 4.7 machine ...

Better yet, move the disk to some off-line, clean system and mount
the compromised disk there. You don't know if the rootkit messed with the
system libraries or if it loaded a KLD.

Or boot from CD and use the CD's binaries.


			Fer