From owner-freebsd-security  Sun Aug 19 18:25: 8 2001
Delivered-To: freebsd-security@freebsd.org
Received: from smtp.pace.edu (ntutil.pace.edu [205.232.111.9])
	by hub.freebsd.org (Postfix) with ESMTP id F033137B413
	for <freebsd-security@FreeBSD.ORG>; Sun, 19 Aug 2001 18:24:53 -0700 (PDT)
	(envelope-from js43064n@pace.edu)
Received: from stmail.pace.edu (205.232.111.7) by smtp.pace.edu (LSMTP for Windows NT v1.1b) with SMTP id <0.A8C6D8B0@smtp.pace.edu>; 19 Aug 2001 21:24:53 -0400
Date: Sun, 19 Aug 2001 21:24:51 -0400
Message-Id: <200108192124.AA162071044@stmail.pace.edu>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
From: "Jonathan Slivko" <js43064n@pace.edu>
Reply-To: <js43064n@pace.edu>
X-Sender: <js43064n@stmail.pace.edu>
To: <freebsd-security@FreeBSD.ORG>, Rami AlZaid <lists@alzaid.com>
Subject: Re: Rooted
X-Mailer: <IMail v6.05>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

A full re-install is much better than what you suggested, IMHO. 
-- Jonathan

--
Jonathan M. Slivko <js43064n@pace.edu>
Microsoft, is that some kind of toilet paper?



---------- Original Message ----------------------------------
From: Rami AlZaid <lists@alzaid.com>
Date: Sun, 19 Aug 2001 20:21:39 -0400

>At 12:26 AM 8/19/2001, you wrote:
>>You may also be backdoored; if you weren't running something 

like tripwire
>>to catch changes in your system files, you may want to go ahead 

and
>>re-install FreeBSD entirely. May not be necessary, but it 

shouldn't hurt.
>
>Would deleting /usr/src, cvsuping all the source, making world 

and 
>replacing all the files in /usr/local/etc and /etc remove the 

backdoors? or 
>is it necessary to wipe the hard disk and install everything all 

over again?
>
>Thanks
>
>Rami AlZaid  <rami (at) alzaid (dot) com>  *  ICQ # 1071118
>WebPages: www.alzaid.com  *  www.wooyeah.com
>
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-security" in the body of the message
>
 

__________________________________________________________________
____
Sent via the Pace University Mail system at stmail.pace.edu


 
                   

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message