The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Reinstall hacked binaries?

Discussion in 'General Discussion' started by SeanLee, Sep 22, 2005.

  1. SeanLee

    SeanLee Well-Known Member

    Joined:
    May 23, 2004
    Messages:
    50
    Likes Received:
    0
    Trophy Points:
    6
    There was a hacking "attempt" via postnuke on my server. Script Kiddies I assume. They were able to install pieces of a rk, but not able to login.

    Question, I've got about 3 hacked binaries: ps, ls, killall
    How would I go about re-installing the proper bins?

    Thanks

    PS please no "just re-install the OS" comments... I'm fully aware of this option.
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    Sorry, but if binaries have been replaced then the only realistic solution is to have an OS restore as soon as possible, as the server can never be trusted again.

    If you must replace the binaries temporarily, then you need to reinstall the package they belong to depnding on your OS and your OS vendors update mechanism.
     
Loading...

Share This Page