|
High-jacked my Server. SPAM BOT
My linux box was high-jacked on Friday 13th, as a spam bot.
I ran chrootkit and it shows a process hidden from the ps cmd.
Luckily, I had spamassassin installed and it stopped the messages. I had over 10,000 messages in my spam folder. The only way to stop sending spam, is to uninstall sendmail.
Anyone else have the same problem? Is there a way to find out which program has been compromised?
|
