nanog mailing list archives

Re: Troyans - this is bad


From: alex () relcom EU net
Date: Wed, 18 Nov 98 01:30:27 +0300

Btw. Remember - not only troyaned files are the problem, but some
additional services can (and WAS) be added into the system. Like
special version of ssh.

This case no MD5 checksumms differ from the distribution, but
you should detect additional ports open for the listening.


--- 
Aleksei Roudnev, Network Operations Center, Relcom, Moscow
(+7 095) 194-19-95 (Network Operations Center Hot Line),(+7 095) 239-10-10, N 13729 (pager)
(+7 095) 196-72-12 (Support), (+7 095) 194-33-28 (Fax)


Current thread: