<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="FeedCreator 1.8" -->
<?xml-stylesheet href="https://wiki.linux.edu/lib/exe/css.php?s=feed" type="text/css"?>
<rss version="2.0">
    <channel xmlns:g="http://base.google.com/ns/1.0">
        <title>Linux Edu Handbook - handbook:handbook:recovery_virus</title>
        <description></description>
        <link>https://wiki.linux.edu/</link>
        <lastBuildDate>Sun, 25 Oct 2026 04:00:00 +0000</lastBuildDate>
        <generator>FeedCreator 1.8</generator>
        <image>
            <url>https://wiki.linux.edu/_media/wiki/dokuwiki.svg</url>
            <title>Linux Edu Handbook</title>
            <link>https://wiki.linux.edu/</link>
        </image>
        <item>
            <title>recover_from_a_virus</title>
            <link>https://wiki.linux.edu/handbook/handbook/recovery_virus/recover_from_a_virus?rev=1271359136&amp;do=diff</link>
            <description>Recover from a virus

krd : kcore reader

presentation

Lets not have our box owned, but what happens if it is owned ? Reboot then redirected syscalls , hidden files users and processes, system unstable. Most of the admins will then just halt, reinstall, copy back backups : well its when krd is useless - some admins will want to know why their box is so unstable, because of what backdoor/virus/whatever : this is when krd is usefull.</description>
            <author>anonymous@undisclosed.example.com (Anonymous)</author>
            <pubDate>Thu, 15 Apr 2010 19:18:56 +0000</pubDate>
        </item>
    </channel>
</rss>
