spyware on cobalt rack/s ?

[fadedangel]

guys,

me and my workmates have walked in this morning to find our business cobalt racks infected with what we think is spyware. we have come to this conclusion since all of our websites we host internally on our server comes up with a spyware popup. now we've taken down our (http) access to the websites to prevent clients from installing this bloody thing. we all know it's hell when it gets on a machine. but my question to you guys n girls is;

has anyone come across anything like spyware on unix or cobalt racks at all ? and if so, do you know of any cleaner for unix or server imparticular ?

please dont come back and say stuff like ad aware, i'm gonna need some ajax industrial equivilant cleaner, only for unix !

thanx.

ben

[twistedcranium]

Try downloading and running chkrootkit from http://www.chkrootkit.org/ to see if there are any 'rootkits' running that could be causing this.

[fadedangel]

twistedcranium, ty v. much my man

appreciate the response. nice work !

[bg703]

I just installed chkrootkit myself and ran a scan. It is pretty thorough and should allow you to locate that pesky little critter.