Zero access Rootkit

[Neil Watson]

Symantec has a removal tool.
http://www.symantec.com/security_response/writeup.jsp?docid=2011-071314-0410-99&tabid=3

I would be very suspicious of that host even after successful remove.
Consider a reinstall for complete safety.

-- 
Neil Watson
Linux/UNIX Consultant
http://watson-wilson.ca
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists