Recovering after being
RootKitted
¨
Manually cleaning up after a RootKit
installation is difficult
–
May miss finding all files that were changed
¨
Use most recent Tripwire-checked backup
¨
Reinstall all operating system components
and applications
¨