Slapper worm attack twice!!!
When I checked my server's load ,it was in between 20-22.So when I checked the logs for possible reason I found too many proftpd requests times out from different ip addresses.
Now I know that,some has scanned my ports,now when I cheked for any possible hacks on server I found some strange results:
I found 4-5 lins saying :
Bogus tcp line etc.. for at least 4-5 times and
a strange line saying ..
bogus Unix line once!!!
then Its shows line saying ..
possible Slapper worm infected ...
Two days back when I checked for the same I have updated the faulty package
namely openssl version .90b etc.
I have applied this patch two days back....
But now today again these line are showing up!!
What should I do to stop this worm from infecting?Is there any method to clean infected files?
Help!!
