6 Sep
2001
6 Sep
'01
11:28
Hi Martin! On Thu, 06 Sep 2001, Martin Peikert wrote:
Max Lindner
wrote: How can I see if he got in my system and deleted my folders? Can you say me, what signs indicate that he is already in my router. Is there a way to hide a programm from ps -axl?
Every rootkit will hide the cracker's activities - you can't trust ps, ls, top and others on your system any longer. If you want to detect a rootkit, try http://www.chkrootkit.org/
there is still a kind-of-ok source of information, namely the proc file system. but indeed, you need a tool to systematicaly check for intrusion, and not make guesses. -- teodor