Re: [PLUG] time to reinstall

[jeff <jeffv@op.net>]

On 1/16/19 1:17 PM, Michael Lazin wrote:
> don't reinstall yet.  Run "lsof -i"
>
> find the pid of the process that makes the connection to ovh
> check the proc filesystem for the corresponding pid, 

I've gotten this far.

you'll find within
> the directory for the pid the name of the binary or script that makes 
> the connection

will do when the next volley occurs.

chkrootkit, clam/maldet, rkhunter all showed clean yesterday.
one file sent to virustotal, all clean.


Thanks muchly.
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug