Problem MIRKFORCE !

[jano novak]

Chcem poprosit o pomoc !

Dostal sa mi na server (Linux RH 7.2) "backdoor" MIRKFORCE.
Ako ho najst a odstranit ?

log:
------------------------------------------
kernel: mirkforce uses obsolete (PF_INET,SOCK_PACKET)
kernel: eth0: Setting promiscuous mode.
kernel: device eth0 entered promiscuous mode
kernel: eth0: Setting promiscuous mode.
kernel: device eth0 left promiscuous mode


named[27193]: loading configuration from '/etc/named.conf'
named[27193]: the default for the 'auth-nxdomain' option is now 'no'
named[27193]: no IPv6 interfaces found
named[27193]: listening on IPv4 interface eth0:5-, 1.2.3.4#53
named[27193]: listening on IPv4 interface eth0:5, x.x.x.5#53
named[27193]: listening on IPv4 interface eth0:6, x.x.x.6#53
named[27193]: listening on IPv4 interface eth0:8, x.x.x.8#53

... atd. x.x.x.254 na vsetky volne IP
------------------------------------------


Dakujem za pomoc,

Jano.




----------
Teraz uz domena .SK pre kazdeho uplne ZADARMO.
Viac info na: http://www.slovaknet.sk/sk-zadarmo.asp