Displaying 1 result from an estimated 1 matches for "random_js_toolkit".
2008 Jan 29
5
Unknown rootkit causes compromised servers
...connecting to your web server:
tcpdump -nAs 2048 src port 80 | grep "[a-zA-Z]\{5\}\.js'"
If you get output from this script, you may be infected.
========================================================
More info:
http://blog.cpanel.net/?p=31
http://www.cpanel.net/security/notes/random_js_toolkit.html
http://www.finjan.com/Pressrelease.aspx?id=1820&PressLan=1819&lan=3
http://www.pcworld.com/article/id,141358-c,techindustrytrends/article.html
http://www.webhostingtalk.com/showthread.php?t=651748
==========================================================
This does not seem to be...