Date: Sat, 02 Mar 2002 20:49:43 -0800 From: Tim Uckun <tim@diligence.com> To: jmdupx@yahoo.com Cc: freebsd-newbies@freebsd.org Subject: Re: Have I been hacked? Message-ID: <4.2.0.58.20020302204519.00a4b2f8@mail.diligence.com> In-Reply-To: <3C819788.16419.12FB4C84@localhost> References: <4.2.0.58.20020302124131.00a4b3d0@mail.diligence.com> <20020302093251.A72890@lymond.lvcm.com>
next in thread | previous in thread | raw e-mail | index | archive | help
At 03:24 AM 3/3/2002 +0000, jmdupx@yahoo.com wrote:
>looks to me like perfect symptoms of a dying hard-drive, but a
>virus attack would have much the same visible effect usually
Well I went into single mode and tried to mount the drives. It said I
needed to fsck which was odd because I had shut it down properly. I did an
fsck and them mounted the dirves, I changed the root password and the
regular users passwd. I ran wipw to make sure no weird accounts were there.
I installed cehckrootkit (or something like that) and ran it, it found no
root kits. I did an lsof and nothing weird is listening on any port.
I don't think I could have gotten a virus because I don't check mail on it
except via mutt and I haven't installed anything on it that was not in
ports. Is there anything else I need to check?
----------------------------------------------
Tim Uckun
Mobile Intelligence Unit.
----------------------------------------------
"There are some who call me TIM?"
----------------------------------------------
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-newbies" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.2.0.58.20020302204519.00a4b2f8>