Re: ksyslogd

[Misa <mice () lauto lv>]

> Do you know of a rootkit, or something like that, that install this
> line in /etc/inittab:
> ld:345:respawn:/usr/sbin/ksyslogd         ?!?

I don't know any rootkits, doin' that, but anyway
it looks like backdoor-daemon, scan yourself and find
the port and may be you understand what is it :)


                                                    Mikhail Testov
                                          E-mail: mice () lauto lv
                                        phone: +371-7027599
                                       cellular: +371-9189695
                                             fax: +371-7027134