[ale] New Linux Rootkit
Scott Plante
splante at insightsys.com
Tue Nov 20 16:53:43 EST 2012
Well, for one thing, it adds a line to /etc/rc.local. So you could take a look at that and see if there's anything out of place.
Scott
----- Original Message -----
Jay Lozier asked:
Quick question - how does determine if the rootkit is running?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20121120/3199b79a/attachment.html>
More information about the Ale
mailing list