trojan - removal problems
Billy Verreynne (JW)
VerreyB at telkom.co.za
Thu Jan 26 06:25:49 UTC 2006
Peter Garrett wrote:
root at prospero:/dev # fuser .static/dev/*
.static/dev/stderr: 22529 25134 25148
.static/dev/stdin: 22529 25134 25148
.static/dev/stdout: 22529 25134 25148
Ditto. That is what I see to.
Brian, it is not a great idea deleting stuff in /dev. However, the
/dev tree can be rebuild use /dev/MAKEDEV. But this script differs
from distrib to distrib so better manpage it before trying it.
Hmm.. also maybe a good idea to do this at the console after having
booted into single user mode.
netstat and lsof also may be interesting for you as a trojan will
surely attempt network access - listening on a UDP ot TCP port...?
This e-mail and its contents are subject to the Telkom SA Limited
e-mail legal notice available at
More information about the ubuntu-users