<div dir="ltr"><div>So apparently my CentOS 5.10 / filePro 5.6.10D4 server has been infected with the Ebury SSH rookit trojan.....where everywhere I look since you should do a fresh OS install as the only known completely safe fix....</div>
<div> </div><div>My question is - I have two identical Dell Poweredge 2850's - same drives, same CPU's (2 Xeon 3.20GHz processors)</div><div>I have the infected system set with two RAID 1's -- first for OS and 2nd for filepro and data</div>
<div>Can I build a RAID 1 on the 'second' server, install the OS and swap JUST the OS drives with the infected system?</div><div>(I know I'll have to add users, etc) but can I do this as 'simply' as it sounds?</div>
<div>My concern would be the RAID being read on the 'new' server, even though it's built the same with the same idential drives, etc....</div><div> </div><div>Is this possible?</div><div> </div><div>thanks</div>
<div> </div><div>Scott</div><div>PDM</div></div>