[ale] New Linux Rootkit

Scott Plante splante at insightsys.com
Tue Nov 20 16:53:43 EST 2012


Well, for one thing, it adds a line to /etc/rc.local. So you could take a look at that and see if there's anything out of place. 
Scott 
----- Original Message -----

Jay Lozier asked: 


Quick question - how does determine if the rootkit is running? 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20121120/3199b79a/attachment.html>


More information about the Ale mailing list