From owner-freebsd-questions  Tue Nov  6 19:40:29 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from spade.pacific.net.sg (spade.pacific.net.sg [203.120.90.71])
	by hub.freebsd.org (Postfix) with ESMTP id 03D3437B416
	for <freebsd-questions@FreeBSD.ORG>; Tue,  6 Nov 2001 19:40:27 -0800 (PST)
Received: from smtp1.pacific.net.sg (smtp1.pacific.net.sg [203.120.90.70])
          by spade.pacific.net.sg with ESMTP
          id fA73eP027693; Wed, 7 Nov 2001 11:40:25 +0800
Received: from ap_280868.pacific.net.sg ([203.208.143.98])
          by smtp1.pacific.net.sg with ESMTP
          id fA73ePl04378; Wed, 7 Nov 2001 11:40:25 +0800
Message-Id: <5.1.0.14.0.20011107113614.00a4cb50@po.pacific.net.sg>
X-Sender: nchee_hoong@po.pacific.net.sg
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Wed, 07 Nov 2001 11:46:42 +0800
To: Kris Kennaway <kris@obsecurity.org>
From: Kelvin Ng Chee Hoong <nchee_hoong@pacific.net.sg>
Subject: Re: Infected by virus
Cc: Kris Kennaway <kris@obsecurity.org>,
	freebsd-questions@FreeBSD.ORG
In-Reply-To: <20011106192302.A35555@xor.obsecurity.org>
References: <5.1.0.14.0.20011107111835.00a4a6e0@po.pacific.net.sg>
 <5.1.0.14.0.20011107092016.00a46320@po.pacific.net.sg>
 <5.1.0.14.0.20011107092016.00a46320@po.pacific.net.sg>
 <20011106190912.A35365@xor.obsecurity.org>
 <5.1.0.14.0.20011107111835.00a4a6e0@po.pacific.net.sg>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


HI Kris ;
     Thank you very much for your valuable advise . By the way , where can 
I get a procedure of precaution or security during installation of 
application software or UNIX ?
     In order to stop repeating make a same mistake , I have to read the 
security procedure before proceed installing software .


At 07:23 PM 11/6/01 -0800, Kris Kennaway wrote:
>On Wed, Nov 07, 2001 at 11:22:09AM +0800, Kelvin Ng Chee Hoong wrote:
> > Well ;
> >      This sound bad news to me . :-(
> > I have installed a lot of application software the system . It consumed me
> > a lot of time to get these services up.
> > I am going to cry if you ask me to wipe the disk and re-install .
> >
> > :-(
>
>If you're very careful to only restore data (not binaries) which you
>have verified to be unaffected, you can safely do so, but there could
>be backdoors hidden in any of the binaries on the system, or in
>configuraton files, etc.  Of course, what you do with your system is
>up to you, but if you don't clean your system thoroughly then you
>might have ongoing problems if your attackers have left a way to get
>back in.
>
>Kris


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message