Przekazana: Odp: RE: help i've been hacked. :(

[Eris Caffee]

> 2) you could examine disk contents many times later on some other
> machine ("mount -t <fs_type> /path/to/XYZ.image /mnt/XYZ").

If you do this then you should add the "-o ro,noexec" option to the mount
command.  You don't want to run the risk of even accidently running an
infected program or else you could end up infecting the new OS as well.

Eris Caffee