I posted this on a couple forums I frequent and thought I would also post it here. While I run Windows servers I keep up with all web server security. As an admin I couldn’t afford not too.
I am sure most of you by now know there is a LKM (Loadable Kernel Module) exploit that is nasty and hard as heck to clean.
Read this thread at Webhosting Talk. Make sure you read it through as there is a users there that has investigated several boxes.
The original story first broke a week or so ago at TheRegister and then again a couple days ago at TheChannelRegister.