fedora core 3 spyware?

[nshack31]

i recently lost ssh root access to my server, the technicians said...

Hi,

your best option would be to have your operating system re-installed which then it will clear any maliscious software running on your server, this is chargedd at £30

Regards

is there spyware on fedora core 3? i had a firewall. how can i tell?

thanks

 

[Jason S]

You don't have spyware...

 

[nshack31]

what about "maliscious software" ??

 

[macdude425]

I doubt there is malicious software on it; it just looks like you got hacked.

BTW, it's really not worth 30 pounds to have them reinstall it for you; you can do it yourself.

 

[philg]

There could be malicious software on it, it probably has been hacked and the cracker may have installed brute force attack software to scan more servers and try to gain access to them.

Once you have been compromised you can not trust anything on that machine. Any files/dirs you plan to copy to the new installation analyse very carefully to make sure they are free of malicious files. Ideally the best thing to do is a complete format and reinstall and then restore data files from a backup stored remotely. This may not be practical if backups are few and far between however.

If the server is at a data center you don't have physical access to then you can't reinstall yourself.

 

[nshack31]

i ran a rootkit checker - seems clean

 

[Sevoma]

Check your tmp directory. Rootkit hunter, nmap, and grsecurity kernel patches are your friends. Check running processes and open ports.