>> Delete Reply from No. 0 article
No. RE: [질문]라면 웜에 걸렸는데요..치료법좀..

등록 2001-01-26 23:10:00 By localhost     조회 2
이름 김한석    

http://whitehats.com/library/worms/ramen/index.html 에서 퍼왔습니다..
저두 걸려서 -.-a
근데, 망가진 index.html 은 어찌할수가 없네요..
흑흑.. -.-;
열시미 복구하세용~~
 Incident Recovery
 Once your computer has been compromised by the ramen worm, you will need to clean up several trouble spots to restore t
he system.  If you want to allow anonymous FTP, then remove "ftp" and "anonymous" from /etc/ftpusers
If you use wu-ftpd in particular, then upgrade to the latest version from the redhat errata web site
If you use NFS then upgrade to the latest version from the redhat errata web site
If you use LPRng then upgrade to the latest version from the redhat errata web site
Remove "/usr/src/.poop/start*.sh" from /etc/rc.d/rc.sysinit
Delete the /usr/src/.poop directory containing worm files
Delete /tmp/ramen.tgz
Delete /sbin/asp
Redhat 6.2: Remove "asp stream tcp nowait root" from /etc/inetd.conf
Redhat 7.0: Delete /etc/xinetd.d/asp
Restore /etc/hosts.deny unless you didn't use tcp wrappers
Restore any replaced index.html files with originals from backup
Reboot the system to kill active worm daemons
When the computer is distracted by the reboot, see if you can sneak an OpenBSD boot floppy in! If you succeed, then cong
ratulations, you are well on your way to reducing embarassment of being rooted by a wet noodle.    :  ramen Warm에 걸
렸습니다... :  어떻게 없애야 하는지요..
:  저는 redhat 7.0을 쓰고 있습니다.
:  그냥 redhat.com에서 패치 버젼 받아서 깔기만 하면 없어지는건 아니겠
: 죠..?
:  초보라서 답답하고 궁금하네요..
:
: --
: 이 곳에 서명을 적어주십시오.
:  ^-^--메룽~~ 서명 ^.^;
[관리자] 패스워드를 입력 하십시오. 답장이 존재하면 함께 삭제됩니다.[ 목록 | 이전 ]
패스워드:    

Copyleft 1999-2026 by JSBoard Open Project
Theme Designed by IDOO All right reserved