Check integrity of Debian system after possible rootkit?
- by artvolk
Good day!
I have a system that was possible rootkited (the IRC bot was installed and +ai attributes were set on /usr/bin, /usr/sbin, /bin, /sbin). The IRC bots were deleted and system was upgraded to 5.0.4 from 4.0. I'm afraid that something in folders I've mentioned was modified. I can't reinstall the box, so if there any way to check integrity of the system?
P.S. I have already checked rkhunter and chrootkit.
Thanks in advance!