|
Right, I linked the Google translation page which is the first Google evidence of the keywords of some of the trojans. Messages dated April 29 - recent, current. Also tells us that the guaranteed solution is a kernel upgrade.
I'm still thinking that my main error was leaving open (an insecured FTP) for a few days as a favor to a small client. Duh. I also made a smaller error in leaving open a file upload service leading to a web-readable directory. It was password-protected but only VERY rudimentarily. Duh.
I have closed the doors I know about and gotten rid of the trojans I know about, but can't assume it's perfectly fixed. It means that I have to assume this system is insecure until I move things systematically to an entirely secure server.
|