From owner-freebsd-newbies Sat Mar 2 11:47: 7 2002 Delivered-To: freebsd-newbies@freebsd.org Received: from diligence.com (diligence.com [216.166.138.131]) by hub.freebsd.org (Postfix) with SMTP id 4B6DB37B402 for ; Sat, 2 Mar 2002 11:47:05 -0800 (PST) Received: (qmail 20062 invoked by uid 535); 2 Mar 2002 12:47:03 -0700 Received: from tim@diligence.com by pdc.diligence.com with qmail-scanner-0.94 (. Clean. Processed in 1.801465 secs); 03/02/2002 12:47:01 Received: from unknown (HELO tim2) (216.166.138.76) by pdc.diligence.com with SMTP; 2 Mar 2002 12:46:59 -0700 Message-Id: <4.2.0.58.20020302124131.00a4b3d0@mail.diligence.com> X-Sender: tuckun@mail.diligence.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.0.58 Date: Sat, 02 Mar 2002 12:49:08 -0800 To: freebsd-newbies@freebsd.org From: Tim Uckun Subject: Have I been hacked? In-Reply-To: <20020302093251.A72890@lymond.lvcm.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-freebsd-newbies@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org I recently installed freebsd 4.5. For various reasons I just let the install sit for a few weeks. I had turned off everything except ssh (no other services running). When I tried to do something the other day I noticed that vi was not working properly. The screen was all messed up and it would not show the text file I was working on (on the console text mode). I thought maybe VIM would work better so I did a cvsup and then did a make install on VIM. The install went OK but I still could not edit files because the screen was fscked up vim. So I did the windows thing and rebooted hoping that would somehow dislodge whatever gremlins were lurking around the system. Now I can't log in, not only that but seems to hang up starting the inetd stuff (I think). I suppose I might have forgotten the password but I doubt it. So two questions. 1) I am supposing that I will have to get into single user mode somehow and change the password is that right? 2) How can I find out if I have been hacked somehow? This is what I suspect so turned off the machine right away. If have been hacked I will have to reinstall. ---------------------------------------------- Tim Uckun Mobile Intelligence Unit. ---------------------------------------------- "There are some who call me TIM?" ---------------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-newbies" in the body of the message