Recovering after being RootKitted
¨Manually cleaning up after a RootKit installation is difficult
–May miss finding all files that were changed
¨Use most recent Tripwire-checked backup
¨Reinstall all operating system components and applications
¨